gitr007 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

amass

In-depth Attack Surface Mapping and Asset Discovery

arjun

HTTP parameter discovery suite.

atutor

automate

Automate arbitrary smart contracts with Gelato Automate

automatic-api-attack-tool

Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.

awesome-ethereum-security

A curated list of awesome Ethereum security references

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

awesome-modular-accounts

📖 A curated list of resources dedicated to Modular Smart Accounts

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-web-security-forked

🐶 A curated list of Web Security materials and resources.

awesome-web3

A curated list of awesome Web3 resources, libraries, tools and more.

awesomexss

Awesome XSS stuff

aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

bug-bounty-vulnerability-research

Vulnerability research and exploits in Public Bug Bounty programs

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

cloud-security-devops

Cloud Security and CI/CD Pipelines

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

command-injection-attacker

SHELLING - a comprehensive OS command injection payload generator

crackmapexec

A swiss army knife for pentesting networks

ctf-writeups

CTF Writeups

ctfchalls

CTF challenges

cve-2018-14667

All about CVE-2018-14667; From what it is to how to successfully exploit it.

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

devsecops

🔱 Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎