veter069 Goto Github PK

acms

Разработка реляцонной базы данных для СКУД предприятия

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active_directory

Notes and resources for YouTube series https://www.youtube.com/c/JohnHammond010

ad-attack-defense

Active Directory Security For Red & Blue Team

ad_russian_names

adhrit

Adhrit is an open source Android APK reversing and analysis tool that can help security researchers and CTF enthusiasts alike. The tool is an effort to cut down on the amount of time spent on reversing and basic reconnaissance of Android applications.

agentuino

Automatically exported from code.google.com/p/agentuino

amass

In-Depth DNS Enumeration and Network Mapping

arjun

Arjun is a python script for finding hidden GET & POST parameters.

assessment-mindset

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-hacking

A curated list of awesome Hacking tutorials, tools and resources

awesomexss

Awesome XSS stuff

bmp180-mm-hg-value

bounty-targets

This project crawls Hackerone/Bugcrowd scopes hourly and dumps them into the bounty-targets-data repo

bounty-targets-data

This repo contains hourly-updated data dumps of Hackerone/Bugcrowd scopes that are eligible for reports

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

carberp

cheatsheets

Helped during my OSCP lab days.

chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

ct-exposer

An OSINT tool that discovers sub-domains by searching Certificate Transparency logs

cve-exploits

PoCs for public CVE's I have been working on.

dnscan

everything-oscp

Custom checklists, cheatsheets, links, and scripts

free-programming-books

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gimmecredz

You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

go-get-rce

CVE-2018-6574