daveyshmave Goto Github PK

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

metasploit-framework

Metasploit Framework

metasploit-payloads

Unified repository for different Metasploit Framework payloads

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

mimikatz

A little tool to play with Windows security

mitigating-web-shells

Guidance for mitigation web shells. #nsacyber

mitreattack-python

A python module for working with ATT&CK

mk7-docs

Developer documentation for the WiFi Pineapple Mark 7

mkit

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

mordor

Re-play Adversarial Techniques

msdt-follina

Codebase to generate an msdt-follina payload

mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. Mutillidae can be installed on Linux and Windows using LAMP, WAMP, and XAMMP. It is pre-installed on SamuraiWTF and OWASP BWA. The existing version can be updated on these platforms. With dozens of vulnerabilities and hints to help the user; this is an easy-to-use web hacking environment designed for labs, security enthusiast, classrooms, CTF, and vulnerability assessment tool targets. Mutillidae has been used in graduate security courses, corporate web sec training courses, and as an "assess the assessor" target for vulnerability assessment software. A containerized version of the application is available as a companion project.

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

nikto

Nikto web server scanner

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nukemyluks

Nuke My LUKS is a network panic button designed to overwrite with random data the LUKS header of computers in a LAN.

offensivecsharp

Collection of Offensive C# Tooling

omg-payloads

openvas-scanner

This repository contains the scanner component for Greenbone Vulnerability Management (GVM). If you are looking for the whole OpenVAS framework please take a look at https://community.greenbone.net/t/frequently-asked-questions-faq/5558.

oscp-bash-scripts

Some handy bash scripts I use for the OSCP

oscp-exercise-checklist

A checklist to help students track their OSCP exercise progress.

oscp-stuff

List of Stuff I did to get through the OSCP :D

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

ossem

Open Source Security Events Metadata (OSSEM)

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

pack

PACK (Password Analysis and Cracking Kit)