virgilcj Goto Github PK

a-red-teamer-diaries

Red_teaming/Pentesting notes and experiments for a real world engagements

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Active Directory Security For Red & Blue Team

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

adape-script

Active Directory Assessment and Privilege Escalation Script

adcskiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

android-insecurebankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

android-security-reference

A W.I.P Android Security Ref

androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

apple_bleee

Apple BLE research

assembly-intro

Intro to x86 Assembly Language.

atomicsyscall

Tools and PoCs for Windows syscall investigation.

atomldr

A DLL loader with advanced evasive features

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010 AKA EternalBlue

autosmuggle

Utility to craft HTML or SVG smuggled files for Red Team engagements

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awe-osee-prep

Advanced Windows Exploitation (AWE)/Offensive Security Exploitation Expert (OSEE) Preparation for BlackHat 2020

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

awesome-iot-hacks

A Collection of Hacks in IoT Space so that we can address them (hopefully).

awesome-red-teaming

List of Awesome Red Teaming Resources

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

bad-pdf

Steal Net-NTLM Hashes with Bad-PDF

bluehound

bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.