frizb Goto Github PK

active-directory-fun

Notes on Active Directory analysis and exploitation

apache-log4j-poc

Apache Log4j 远程代码执行

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

bloodhoundcustomqueries

List of Bloodhound Python Custom Queries which I have found to be handy on engagements

bypassing-web-application-firewalls

A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers

c2

C2

cliserialfuzzer

Serial Connection CLI Command Jail Break Fuzzer

ctf-walkthroughs

A collection of CTF Walkthroughs

cve-2018-2628

CVE-2018-2628

cve-2018-2629

directory-traversal-toolbox

A few handy scripts for pulling important files off remote machines using a directory traversal or local file include vulnerability.

dirtystringinjectoneliner

A one liner dirty string with many common injection techniques

firmwarereverseengineering

Notes and tools from my experiences reverse engineering firmware

hackingwithcurl

A list of examples and references of hacking with Bash and the Curl command

hashcat-cheatsheet

Hashcat Cheatsheet for OSCP

hydra-cheatsheet

Hydra Password Cracking Cheetsheet

kalitroubleshooting

Handy Tricks for Troubleshooting Kali

linux-privilege-escalation

Tips and Tricks for Linux Priv Escalation

magicping

Python 2.7 raw socket ICMP ping to send a embedded message or a magic ping to an endpoint

mousejacking

MouseJacking on Kali Linux with CrazyRadio PA

msf-venom-cheatsheet

Single Page Cheatsheet for common MSF Venom One Liners

openssl-enc-by-example

Examples of how to use openssl-enc for symmetric cipher encryption and decryption

oscp

Collection of things made during my OSCP journey

oscp-survival-guide

Kali Linux Offensive Security Certified Professional Survival Exam Guide

passworddecrypts

Handy Stored Password Decryption Techniques

powershell-cheatsheet

Hand list of Powershell commands frequently used during penetration tests

python_des_decryptor

A simple python script for decrypting DES that has been generated by a .NET application

silenttrinity

A post-exploitation agent powered by Python, IronPython, C#/.NET

sitemapmaker

Creates an HTML site map based on a specified base URL and a folder path. Handy for exploring for hidden content in Burp Suite if you have the application’s source code.