lexcia Goto Github PK

cheatsheets

Penetration Testing/Security Cheatsheets

community

Volatility plugins developed and maintained by the community

firing-range

free-security-ebooks

Free Security and Hacking eBooks

jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

jsdetox

A Javascript malware analysis tool

kali-linux

A complete documentation for transforming yourself from script-kiddie to professional hacker.

meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

moloch

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

postman-app-support

Postman helps you be more efficient while working with APIs. Using Postman, you can construct complex HTTP requests quickly, organize them in collections and share them with your co-workers.

probable-wordlists

Wordlists sorted by probability originally created for password generation and testing

profiles

Volatility profiles for Linux and Mac OS X

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

quasarrat

Remote Administration Tool for Windows

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

vcdb

VERIS Community Database

veris

Vocabulary for Event Recording and Incident Sharing (VERIS)

volatility

An advanced memory forensics framework

wavsep

The Web Application Vulnerability Scanner Evaluation Project

zaproxy

The OWASP ZAP core project