secfb Goto Github PK

0x94scanner

Multi Thread POST|GET (BLIND/TIME BASED/HEADER/SQL/XSS/LFI) INJECTION SCANNER

0x94tr

0x94TR Burp Extension - Java version

0xsp-mongoose

a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.

12

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

3klcon

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

3xpl01t5

Random Exploits

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

aboutsecurity

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

aceldr

Cobalt Strike UDRL for memory scanner evasion.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-hacktools

Small collection of Active Directory pentesting tools.

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin?

adape-script

Active Directory Assessment and Privilege Escalation Script

adenum

AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos.

adhunttool

official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

advanced-sql-injection-cheatsheet

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation.

aggressorassessor

Aggressor scripts for phases of a pen test or red team assessment

alanframework

A C2 post-exploitation framework

all-about-apikey

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

amsi_bypass

android-penetration-testing-cheat-sheet

Work in progress...

android-pin-bruteforce

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

androidsecnotes

An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentesters, reverse engineer, and redteamers.