vcanev Goto Github PK

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-web-hacking

A list of web application security

cobra

All in one tool to make your hacking easier.

cve-2022-21907

Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

eagleshell

EagleShell is a high-quality tool that aims to improve your pentest.

ejpt-notes

Notes I took while preparing for eJPT certification by eLearn Security (passed 19/20)

ejptv2-notes

Penetration Testing Student version 2 simple condensed NOTES for quick recap

go365

An Office365 User Attack Tool

how-to-secure-a-linux-server

An evolving how-to guide for securing a Linux server.

linux-hardening-checklist

Simple checklist to help you deploying the most important areas of the GNU/Linux production systems - work in progress.

linwinpwn

linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks

litephish

lite weight phishing tool with graphical panel and 19+ pages

lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

mihari

A framework for continuous OSINT based threat hunting

mushikago

an automatic penetration testing tool

o365-doppelganger

A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user

o365recon

retrieve information via O365 and AzureAD with a valid cred

oscp-tips

Tips and Tricks for OSCP and Beyond!

pentest-tools-collection

plumhound

Bloodhound for Blue and Purple Teams

powershellarmoury

A PowerShell armoury for penetration testers or other random security guys

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

reverse-ssh

Statically-linked ssh server with reverse shell functionality for CTFs and such

secmon

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

sfoffo-pentesting-notes

Repository containing all knowledge I gained from CTFs, real life penetration testing and self-learning.

sniperphish

SniperPhish - The Web-Email Spear Phishing Toolkit

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

weaponizekali.sh

Automate installation of extra pentest tools on Kali Linux

windows-auditing-mindmap

Set of Mindmaps providing a detailed overview of the different #Windows auditing capacities and event log files.