badbiddy Goto Github PK

acsploit

A tool for generating worst-case inputs to commonly used algorithms

ad-control-paths

Active Directory Control Paths auditing and graphing tools

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

androbugs_framework

AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

ansibleplaybooks

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

app-sec-wiki

Files for appsecwiki.com

apt2

automated penetration toolkit

autopwn

Specify targets and run sets of tools against them

awesome-exploit-development

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

aws-scanner

Scans a list of websites for Cloudfront or S3 Buckets

bbot

OSINT automation for hackers.

betterdefaultpasslist

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

bloodhound.py

A Python based ingestor for BloodHound

bloodhoundqueries

bounty-monitor

Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.

bugbounty

RepoToStoreBugBountyInfo

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

carnivore

Microsoft External Attack Tool

cisco-rce

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

cobalt-wipe

Cobalt wipe is the non-commercial version of Cobalt-Strike 4.3 (May 2021 Release)

cracke-dit

cracke-dit ("Cracked It") makes it easier to perform regular password audits against Active Directory environments.

darthsidious

Building an Active Directory domain and hacking it

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

dolos_cloak

Automated 802.1x Bypass

eicar-standard-antivirus-test-files

esp-rfid-thief

The ESP-RFID-Thief is a port of the Tastic RFID Thief to the ESP12S chip with the addition of a web interface and various new features. Repository includes files for both the hardware and software.