anon0ps Goto Github PK

braindamage

Remote administration tool which uses Telegram as a C&C server

breacher

An advanced multithreaded admin panel finder written in python.

bruteforce-lists

Some files for bruteforcing certain things.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugzee

Simple Script to install recommended Bug Bounty Hunting Tools In Your Linux Disto

burp-molly-pack

Security checks pack for Burp Suite

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cheatsheets

Penetration Testing/Security Cheatsheets

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

checklists

Pentesting checklists for various engagements

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

chromeless

🖥 Chrome automation made simple. Runs locally or headless on AWS Lambda.

chromium-hardening

Hardens Chromium and it's settings in the name of 'security' :suspect:

command-injection-payload-list

🎯 Command Injection Payload List

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

cr3dov3r

Know the dangers of credential reuse attacks.

crlf-injection-scanner

Command line tool for testing CRLF injection on list of domains.

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

custombottobar

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

danger-zone

Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.

dbc2

DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.

developer-roadmap

Roadmap to becoming a web developer in 2018

devops-interview-questions

dirty_sock

Ubuntu Linux privilege escalation exploit (CVE-2019-7304)

django-bootstrap-pagination

Django template tag for rendering Page objects as Bootstrap pagination HTML

django-cms

The easy-to-use and developer-friendly CMS

django-drupal-auth

A Djanog authenticate helper using drupal database