open-sec Goto Github PK

oseh

Open-Sec Ethical Hacker

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

p1

pacemaker

Heartbleed (CVE-2014-0160) client exploit

pastejacker

Add PasteJacking to web-delivery attacks

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesting

pentestkit

Useful tools for Penetration Testing

phantom-evasion

Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)

phemail

PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test

poc-exploit

PoC or Exp Of Vulnerability

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

poshc2_python

Python Server for PoshC2

powersap

Powershell SAP assessment tool

powershdll

Run PowerShell with rundll32. Bypass software restrictions.

presentaciones

Enlaces o archivos de presentaciones diversas

privesc-cve-2015-5602

Sudo <= 1.8.14 Local Privilege Escalation and vulnerable container

prowler

Tool for AWS security assessment, auditing and hardening. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark (https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf)

proxycannon-ng

A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference

ps-tools

Ps-Tools, an advanced process monitoring toolkit for offensive operations

publico

Repositorio Público

punch-q

👊A small utility to play with IBM MQ

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

purplesharp

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

pwndb

Search for leaked credentials

pwnedhub

pyjwt

JSON Web Token implementation in Python

pymeta

Pymeta will search the web for files on a domain to download and extract metadata. This technique can be used to identify: domains, usernames, software/version numbers and naming conventions.