therawman Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

android-pin-bruteforce

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api_wordlist

A wordlist of API names for web application assessments

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

cheatsheets-1

Penetration Testing/Security Cheatsheets

cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2021-1676

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-26084_confluence

Confluence Server Webwork OGNL injection

dict

fuzz.txt

Potentially dangerous files

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

httpleaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

ipwn

itwasalladream

A PrintNightmare (CVE-2021-3457) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

mikrotik_openvpn_server_setup

MikroTiK OpenVPN Server Setup

ml-course-hse

Машинное обучение на ФКН ВШЭ

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

network_password

Password list collected from Cisco devices

passwordchanger1c

1C:Enterprise 8 - Password Changer

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-guide

Penetration tests cases, resources and guidelines.

printnightmare

printnightmare-lpe

CVE-2021-1675 (PrintNightmare)

python-examples

Example scripts for common python tasks

rubyosint

Ruby based script to perform application scanning of a URL, looking for specific pages to target.

scapy

Scapy Presentation and Code

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.