secfury Goto Github PK

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest-cheatsheets

pentest-handbook

This a notes/handbook i made and gathered from a great resources on the internet. It consist of a very detailed cheat sheets and useful commands that every pentester use on a daily basis.

pentest-pivoting

A compact guide to network pivoting for penetration testings / CTF challenges.

pentest-reports

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

poor-mans-pentest

This a collection of the code that I have written for the Poor Man's Pentest presentation.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

profanity

Ncurses based XMPP client

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

rapidscan

:new: The Multi-Tool Web Vulnerability Scanner.

reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

red-book

Hack-Army.net / Gitbook for Red Teaming

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

roothelper

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

rsactftool

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

salt

Software to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt software package repository here:

scripts

A dump of all the scripts that I make

sudo_killer

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

suid3num

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

techbooks

tirefire

Automate the scanning and enumeration of machines externally while maintaining complete control over scans shot to the target. Comfortable GUI-ish platform. Great for OSCP/HTB type Machines as well as penetration testing.

tools

web-security-academy-series

wfi

Windows File Integrity -- an archive of information on installed Windows binaries.

windows_lpe_afd_cve-2023-21768

LPE exploit for CVE-2023-21768

writeup-converter

Script for grabbing markdown files and Obsidian attachments from one folder and copying them to another.