kienzx203 Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

acunetix23

android-ios-cheat-sheet

androidmobilepentest101

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

api_wordlist

A wordlist of API names for web application assessments

apkscan

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

attackrmi

attackRmi

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-team-operations

bbot

A recursive internet scanner for hackers.

burp-suite-certified-practitioner-exam-study

Burp Suite Certified Practitioner Exam Study

burp-suite-pro

A bash and powershell script to download the latest version of Burp-Suite Professional and use it for free.

burpsuiteinstaller

Install and Crack your Burp Suite Professional Latest (Updated Weekly).

chromekatz

Dump cookies and credentials directly from Chrome/Edge process memory

codeallthethings

A list of threat sinks used in the manual security source code review for application security

command-injection-payload-list

🎯 Command Injection Payload List

cve-2024-28397-js2py-sandbox-escape

CVE-2024-28397: js2py sandbox escape, bypass pyimport restriction.

cve-t4pdf

CVEs and Techniques used PDF as an attack vector.

cyberphish

A heavily armed customizable phishing tool for educational purpose only

deepspeed

DeepSpeed is a deep learning optimization library that makes distributed training and inference easy, efficient, and effective.

findeverything

内网渗透过程中搜寻指定文件内容，从而找到突破口的一个小工具

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

gda-android-reversing-tool

google-dorks

Useful Google Dorks for WebSecurity and Bug Bounty

hacking-pdf

Here Are Some Popular Hacking PDF