bl4ck0psn1nj4 Goto Github PK

bad-apple

Bash script to kill unnecessary services running on OS X

bpatty

Brian's Pentesting and Technical Tips for You

cheatsheets

This was originally posted by jshaw87. I wanted to keep a copy/update it on the off chance he took it down.

cyber-security

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

ducky-scripts

A collection of scripts for HAK5's USB Rubber Ducky

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

fingerprintjs2

Modern & flexible browser fingerprinting library, a successor to the original fingerprintjs

fuzzdb

The most comprehensive dictionary of attack pattern variants and primitives for black-box application fault injection and resource discovery.

juice-shop

OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.

linux_privcheck

Check privileges, settings and other information on Linux systems

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

mpc

Msfvenom Payload Creator (MPC)

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

os-scripts

Personal Collection of Operating Systems Scripts

paramiko

The leading native Python SSHv2 protocol library.

penbox

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

smbmap

SMBMap is a handy SMB enumeration tool

sn1per

Automated Pentest Recon Scanner

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

webgoat

WebGoat 8.0

windowsexploits

Windows exploits, mostly precompiled.