active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

activedirectory

Apuntes Pentesting a ActiveDirectory PentesterAcademy

adape-script

Active Directory Assessment and Privilege Escalation Script

addresbook-bash

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

android-vulnerabilities

Covers Top 10 OWASP Mobile Vulnerabilities

androidsecnotes

An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentesters, reverse engineer, and redteamers.

arjun

HTTP parameter discovery suite.

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awesome-azure-pentest

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-oscp

A curated list of awesome OSCP resources

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-team-operations

azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

bheem

bloodhound

Six Degrees of Domain Admin

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloudview-connector-azure

Create Azure Connector in CloudView using Management Group or ARM Template

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

cs-challenge

Detectify Crowdsource Challenge

cve-2021-26855-ssrf

This script helps to identify CVE-2021-26855 ssrf Poc

cve-2021-29003

cve-2021-40444

CVE-2021-40444 PoC

docker_fetch

Data extraction tool for Docker Registry API

dooked

DNS and Target HTTP History Local Storage and Search

duckuino

Simple DuckyScript to Arduino C converter.

ejpt

ejpt-1

My notes taken during eJPT labs - in preparation for the exam