xalfie Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

bug-bounty-oneliners

Oneliners curated from my experience and from the internet

ccat

Cisco Config Analysis Tool

ciscosmartinstallexploit

crazyrecon

Forked to mirror my needs, all credits to Capt-Meelo. Regards, Alfie

cve-2020-3452-exploit

Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances.

gmapsapiscanner

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

mssql-cis-audit

MSSQL CIS Auditor

nix-auditor

Nix Audit made easier (RHEL, CentOS) :fire: :fire: :fire:

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

oracle-ebs-security-audit

Wordlist to get files/ folders listed by the app that may expose passwords, sensitive file or folders

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharepoint-url-fuzzlist

shell-backdoor-list

🎯 PHP / ASP - Shell Backdoor List 🎯

sophosxg_graylog

Sophos XG Firewall - content pack, extraction rules, pipeline rules, streams, and a dashboard

wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.

wpxmlrpcbrute

Brute force WordPress sites vulnerabile to XML-RPC amplification.