kingofthebeat Goto Github PK

awesome-security-tool-list

This is a list of security tools that I have used or recommend. Welcome any contributions!

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

aws-redteam-adlab

aws-sso-cli

A powerful tool for using AWS SSO for the CLI and web console.

aws_pwn

A collection of AWS penetration testing junk

awsxenos

AWSXenos will list all the trust relationships in all the IAM roles and S3 buckets

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

azredteamenumscript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

azucar

Security auditing tool for Azure environments

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

books

books

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bundler-audit

Patch-level verification for Bundler

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

burpsuitecertifiedpractitioner

Ultimate Burp Suite Exam and PortSwigger Labs Guide.

bypass-403

A simple script just made for self use for bypassing 403

cheat.sh

the only cheat sheet you need

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cheesetools

Self-developed tools for Lateral Movement/Code Execution

cloud-security-attacks

Azure and AWS Attacks

cloudbrute

Awesome cloud enumerator

cloudflair

🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cloudsploit

Cloud Security Posture Management (CSPM)

cloudunflare

Reconnaissance Real IP address for Cloudflare Bypass

clusterd

application server attack toolkit

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution.