rubxkub Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

apklab

Android Reverse-Engineering Workbench for VS Code

assetfinder

Find domains and subdomains related to a given domain

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

breach-parse

A tool for parsing breached passwords

chisel

A fast TCP/UDP tunnel over HTTP

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

ejpt-feedback

Here some advices and C

inventory

Asset inventory of over 800 public bug bounty programs.

jaws

JAWS - Just Another Windows (Enum) Script

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

kiterunner

Contextual Content Discovery Tool

ldapdomaindump

Active Directory information dumper via LDAP

leaked-credentials

how to look for Leaked Credentials !

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-bookmarks

a collection of handy bookmarks

php-reverse-shell

plumhound

Bloodhound for Blue and Purple Teams

poc-metabase-cve-2021-41277

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pypykatz

Mimikatz implementation in pure Python

resources-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

rubxkub

Config files for my GitHub profile.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

sharpup

SharpUp is a C# port of various PowerUp functionality.

sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.