ahmed118 Goto Github PK

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

awesome-web-security

🐶 A curated list of Web Security materials and resources.

blind-sqli

A simple python script that exploits blind SQL Injections. Useful for PoCs.

ctfs

CTFs, Boot2Roots etc...

domain

Setup script for Regon-ng

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

mustache-security

Automatically exported from code.google.com/p/mustache-security

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

powerlessshell

Run PowerShell command without invoking powershell.exe

redteampowershellscripts

Powershell script that search through the Windows event logs for specific user

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

rsa-test

This script obtain Cipher text from p,q,dp,dq and c :) ..

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

securitytube-gnu-debugger-expert

GDB tutorial

shellpop

Pop shells like a master.

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

windowsexploits

Windows exploits, mostly precompiled.

writeups

x86-assembly-language-and-shellcoding-on-linux

Shellcoding on Linux

xmlrpc-bruteforcer

Multi-threaded XMLRPC brute forcer using amplification attacks targeting WordPress installations prior to version 4.4.

xsstrike

XSStrike is an advanced XSS detection and exploitation suite.