acmo21 Goto Github PK

1on1-questions

Mega list of 1 on 1 meeting questions compiled from a variety to sources

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad_sec_tools

adsecurity

airmaster

Use ExpiredDomains.net and BlueCoat to find useful domains for red team.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

az-500-azure-security

bloodhoundqueries

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

catmyphish

Search for categorized domain

cobaltstrike-toolkit

Some useful scripts for CobaltStrike

cve-2020-3153

Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal

datasploit

Utilizing various Open Source Intelligence (OSINT) tools and techniques that we have found to be effective, DataSploit brings them all into one place, correlates the raw data captured and gives the user, all the relevant information about the domain/email/ phone number/person, etc. It allows you to collect relevant information about a target which can expand your attack/defence surface very quickly. Sometimes it might even pluck the low hanging fruits for you without even touching the target and give you quick wins. More documentation here: http://datasploit.readthedocs.io/en/latest/.

dirty_sock

Ubuntu Linux privilege escalation exploit (CVE-2019-7304)

droidstatx

Python tool that generates an Xmind map with all the information gathered and any evidence of possible vulnerabilities identified via static analysis. The map itself is an Android Application Pentesting Methodology component, which assists Pentesters to cover all important areas during an assessment.

dumpert

LSASS memory dumper using direct system calls and API unhooking.

fakeimageexploiter

Use a Fake image.jpg (hide known file extensions) to exploit targets

fenrir-ocd

grouper2

Find vulnerabilities in AD Group Policy

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

keytabextract

Extracts Key Values from .keytab files

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

poc

Various PoCs

powersap

Powershell SAP assessment tool

red-team

review-checklists

This repo contains code and examples to operationalize spreadsheet-based checklists that can be used for Azure design reviews on multiple technologies.

roadtoken

rubeus

Trying to tame the three-headed dog.

shadowbrokersfiles

Cracked ShadowBrokers tools and latested dumps 😎