0xshyam Goto Github PK

eternalblue-doublepulsar-metasploit

exploit-database

The official Exploit Database repository

fingerprinter

CMS/LMS/Library etc Versions Fingerprinter

firing-range

flashbang

Project "Flashbang" - An open-source Flash-security helper

fuzzdb

Official FuzzDB project repository

gitminer

Tool for advanced mining for content on Github

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

groupenum

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

hamm3r.py

A general purpose multi-threaded fuzzer powered by Radamsa

honggfuzz

Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)

icmp_transmitter

icmp_tunnel_ex_filtrate

Code snippet accompanying blog post

icmptunnel

Tunnel IP over ICMP.

infosec_reference

An Information Security Reference That Doesn't Suck

javaunserializeexploits

manual_verification

Most of the times during pentest / vulnerability assessment you need to verify a finding before marking it as confirmed or false positive. This repository will try to put in sample code snippets / command's that can be used to perform that.

mimikatz

A little tool to play with Windows security

nmap-android

Nmap on Android - Makefile/diff/scripts to build it with Android NDK

oscp-prep

A list of the resources I used as a prepared for the PWK course

osed

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

owasp-vwad

The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

parsers

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poodle-poc

Poodle (Padding Oracle On Downgraded Legacy Encryption) attack

printnightmare

privesc

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

ptscripts

pynmap

A serious(Tried to be) attempt to implement multi-threading to nmap module, which would result in faster scanning speed. I know that one can write NSE scripts for multi-threaded scanning with it, but I wanted to try it on python.