bsrinivasguptha Goto Github PK

reversetcpshell

PowerShell ReverseTCP Shell - Framework

ripgrep

ripgrep recursively searches directories for a regex pattern

rtfm

A database of common, interesting or useful commands, in one handy referable form

ruler

A tool to abuse Exchange services

s23riu2

sample-web-app

sample_angular_app

scratch

Repo with random useful scripts and utilities

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpdllproxy

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

small

Smallest possible syntactically valid files of different types

smod

MODBUS Penetration Testing Framework

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

sourcegraph

Universal code search (self-hosted)

spikepp

SPIKE is a protocol fuzzer creation kit. It provides an API that allows a user to create their own fuzzers for network based protocols using the C++ programming language. The tool defines a number of primitives that it makes available to C coders, which allows it to construct fuzzed messages called “SPIKES” that can be sent to a network service to hopefully induce errors. SPIKE was specifically designed to focus on finding exploitable bugs, so it’s an excellent choice for our purposes. SPIKE also includes a simple scripting capability, and within the SPIKE distribution, there are a few command line tools which can act as interpreters to simple text files containing SPIKE primitives.

spotter

Targeted Payload Execution

static-files

A collection of static files maintained by the Sublime team, primarily used for phishing defense.

strace-static-binary

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

symboliclink-testing-tools

tcm-security-sample-pentest-report

Sample pentest report provided by TCM Security

test-dll-file

text-templates

Create and use text templates

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

uacme

Defeating Windows User Account Control

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.