5xshanks Goto Github PK

1nv0k3-rvb3us2

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

amass

In-depth Attack Surface Mapping and Asset Discovery

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsitrigger

The Hunt for Malicious Strings

aort

All in One Recon Tool for Bug Bounty

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-red-teaming

List of Awesome Red Teaming Resources

bugcrowd_university

Open source education content for the researcher community

build_and_test_examples

Examples of build scripts and unit test frameworks for various languages, and how these can be used with the Jenkins continuous integration server. Contact: @mikej888

checklists

Red Teaming & Pentesting checklists for various engagements

dfscoerce

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

dirtycoww

donpapi

Dumping DPAPI credz remotely

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

elk

Supporting Repo for ELK installation Youtube video

evil-winrm

The ultimate WinRM shell for hacking/pentesting

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

ghunt

🕵️‍♂️ Investigate Google Accounts with emails.

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hackthebox-ctf-writeups

This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.

handlekatz

PIC lsass dumper using cloned handles

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

hekatomb

Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.

hindsight

Web browser forensics for Google Chrome/Chromium

ilspy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

invoke-obfuscation

PowerShell Obfuscator

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application