smn666 Goto Github PK

-the-xss-rat-securitytesting-

The-XSS-Rat / SecurityTesting

a-collection-of-guides-and-techniques-related-to-penetration-testing.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-pentest-notes

个人域渗透学习笔记

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adgenerator

Active Directory Generator files for Movement, Pivoting, and Persistence for Pentesters and Ethical Hackers.

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

allstar

GitHub App to set and enforce security policies

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

apt_report

Interesting apt report collection and some special ioc express

aptnotes

Various public documents, whitepapers and articles about APT campaigns

atlasldr

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

awesome-av-edr-xdr-bypass

Awesome AV/EDR/XDR Bypass Tips

awesome-aws-security

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

awesome-cloud-pentest

Awesome-Cloud-PenTest

awesome-gpt-agents

A curated list of GPT agents for cybersecurity

awesome-linux-rootkits

awesome-linux-rootkits

awesome-malware-analysis

Defund the Police.

awesome-python

An opinionated list of awesome Python frameworks, libraries, software and resources.

awesome-red-team-operations

Awesome-Red-Team-Operations Fork

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

beacon_source

not a reverse-engineered version of the Cobalt Strike Beacon

bloodhound-tools

Miscellaneous tools for BloodHound

c2-framework-collection

C2 framework collection & note

cloud-security-attacks

Azure and AWS Attacks

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cpu-internals

Intel / AMD CPU Internals

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.