anacosteira Goto Github PK

1on1-questions

Mega list of 1 on 1 meeting questions compiled from a variety to sources

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad_sec_tools

adsecurity

airmaster

Use ExpiredDomains.net and BlueCoat to find useful domains for red team.

aquatone

A Tool for Domain Flyovers

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

automated-ad-setup

A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hardening.

awesome-azure-pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

az-500-azure-security

bloodhoundqueries

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

catmyphish

Search for categorized domain

cobaltstrike-toolkit

Some useful scripts for CobaltStrike

cobaltstrike_services

AutoStart teamserver and listeners with services

cpd

Parallel and Distributed Computing course project: DNA longest common subsequence with OMP and MPI

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

cve-2020-3153

Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal

cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

datasploit

Utilizing various Open Source Intelligence (OSINT) tools and techniques that we have found to be effective, DataSploit brings them all into one place, correlates the raw data captured and gives the user, all the relevant information about the domain/email/ phone number/person, etc. It allows you to collect relevant information about a target which can expand your attack/defence surface very quickly. Sometimes it might even pluck the low hanging fruits for you without even touching the target and give you quick wins. More documentation here: http://datasploit.readthedocs.io/en/latest/.

dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

dirty_sock

Ubuntu Linux privilege escalation exploit (CVE-2019-7304)

domainfrontinglists

A list of Domain Frontable Domains by CDN

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

droidstatx

Python tool that generates an Xmind map with all the information gathered and any evidence of possible vulnerabilities identified via static analysis. The map itself is an Android Application Pentesting Methodology component, which assists Pentesters to cover all important areas during an assessment.

dumpert

LSASS memory dumper using direct system calls and API unhooking.

fakeimageexploiter

Use a Fake image.jpg (hide known file extensions) to exploit targets

fenrir-ocd