zeyad-azima Goto Github PK

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

allure_testops_idor

Allure TestOps IDOR vulnerability

allure_testops_storedxss

Allure TestOps Stored XSS vulnerability

asm-vscode

VSCode Configuration files to easily compile, debug & run Assembly codes using system utilities

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-exploit-development

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

awesome-ml-for-cybersecurity

:octocat: Machine Learning for Cyber Security

awesome-profile-readme-templates

A collection of awesome readme templates to display on your profile

awesome-red-teaming

List of Awesome Red Teaming Resources

azredteamenumscript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

bash-fu

Most common Linux commands and their examples

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

checklists

Red Teaming & Pentesting checklists for various engagements

cve-2019-10999

Full exploit for D-Link DCS-5020L, POC crash for others that are vulnerable as well.

cve-2022-1388

F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB

cve-2022-22733

Apache ShardingSphere ElasticJob-UI Privilege Escalation & RCE Exploit

cve-2023-26818

CVE-2023-26818 Exploit MacOS TCC Bypass W/ Telegram

cve-2024-27348

Apache HugeGraph Server RCE Scanner ( CVE-2024-27348 )

db

Bugbounty utility to store the list of the enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]

dirub

Fast Directory Bruteforcer Written in Ruby

ecppt-notes

Notes on ECPPT

ewpt

eWPT Notes

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

huawei_thief

Huawei DG8045 & HG633 Devices Exploitation Tool

infosec-interview-questions

There are bunch of questions & answers I've collected for possible Interview Questions for Infosec people

issabel-stored-xss

killx108

Exploit for unknown vulnerability in `ZXHN H168N V3.5` to kill the device with one request.

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks