kingofthebeat Goto Github PK

crack-sec-eng-interviews

Cracking the Security Engineer Interviews

credsleaker

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validating it against the DC and leaks it via an HTTP request.

ctf-pwn-tips

Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

cve-2019-5418-scanner

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

cve-2020-0688_exp

CVE-2020-0688_EXP Auto trigger payload & encrypt method

cve-in-ruby

Exploits written & ported to Ruby - no Metasploit

cve-search

cve-search - a tool to perform local searches for known vulnerabilities

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

demolab

A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI

devguide

The OWASP Guide

devsecops-playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

diaspora

Distributed and contextual social networking

didierstevenssuite

Please no pull requests for this repository. Thanks!

direct-syscalls-a-journey-from-high-to-low

Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

dirtycow.github.io

Dirty COW

dnslivery

Easy files and payloads delivery over DNS

docker-security

Getting a handle on container security

docker-vulnerability-environment

Use the docker to build a vulnerability environment

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

equationgroupleak

Archive of leaked Equation Group materials

exploit-writing-for-oswe

Tips on how to write exploit scripts (faster!)

exploitdb-bin-sploits

Exploit Database binary exploits located in the /sploits directory

exploitdb-papers

exploit-database-papers

exploitingbooks

Reversing & Exploiting Books Collection

fuzz.txt

Potentially dangerous files

gcp-iam-privilege-escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

ghidra

ghostinthepdf

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)