lowfruithanger Goto Github PK

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

azure-red-team

Azure Security Resources and Notes

bof_helper

Beacon Object File (BOF) Creation Helper

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

charlotte

c++ fully undetected shellcode launcher ;)

ciphey

Automated decryption tool

clmbypass

Bypass Constrained Language Mode in PowerShell

cobalt-strike-cheatsheet

Some notes and examples for cobalt strike's functionality

cobalt_strike_extension_kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.

colabcat

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

command-mobile-penetration-testing-cheatsheet

Mobile penetration testing android & iOS command cheatsheet

crest-exam-prep

Cheatsheets and write ups for the CREST CRT and CCT Exams.

crest-mock-exam

CREST CCT Mock Exam Paper

easyxsspayload

XssPayload List . Usage:

edrsandblast

ffufplus

You can read the writeup on this script here

file-upload

Catalogue de payloads destinés au téléversement de fichiers. Il s'agit d'un ensemble de plusieurs fichiers contenant du code malveillant à utiliser lors des tests d'intrusion, rassemblés en un seul endroit.

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

frida-ios-dump

pull decrypted ipa from jailbreak device

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

ghidra

Ghidra is a software reverse engineering (SRE) framework

godgenesis

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hellhall

Performing Indirect Clean Syscalls

home-grown-red-team

hopla

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

howtohunt

Some Tutorials and Things to Do while Hunting That Vulnerability.