the-legend3 Goto Github PK

aquatone

A Tool for Domain Flyovers

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

autopwn

Specify targets and run sets of tools against them

autosint

Tool to automate common OSINT tasks

awesome-cve-poc

✍️ A curated list of CVE PoCs.

belati

The Traditional Swiss Army Knife for OSINT

beroot

Privilege Escalation Project - Windows / Linux / Mac

blackhat-arsenal-tools

Black Hat Arsenal Tools Official Account

boopsuite

A Suite of Tools written in Python for wireless auditing and security testing.

burpnotesextension

Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cheatsheets

Helped during my OSCP lab days.

credsleaker

cryptomg

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

cve-2017-10271

Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)

cve-2018-2628

CVE-2018-2628 & CVE-2018-2893

cve-2019-2618

Weblogic Upload Vuln(Need username password)-CVE-2019-2618

cve-2019-2725

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

cybot

Open Source Threat Intelligence Chat Bot

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

docker-privilege-escalation

A docker example for privilege escalation

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

emailaddressmangler

This module mangles two lists of names together to generate a list of potential email addresses or usernames. It can also be used to simply combine a list of full names in the format (firstname lastname) into either email addresses or usernames.

exploit-scripts

存放一些自己写过的漏洞利用脚本

findomain

The fastest and cross-platform subdomain enumerator, don't waste your time.

g-scout

Google Cloud Platform Security Tool

gitrob

Reconnaissance tool for GitHub organizations