jesusabascal Goto Github PK

2lcs

LifeCycle Services

ar-examples

Augmented Reality examples for the web.

attiny85

RubberDucky like payloads for DigiSpark Attiny85

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

b4tm4n

B4TM4N ~ PHP WEBSHELL

cehv10

Leaked slides and labs

ctf-tools

Some setup scripts for security research tools.

cybercamp2019-securityar-workshop

Workshop about how to develop different solutions to make our physical spaces more secure digitally.

dirhunt

Find web directories without bruteforce

ds_walk

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

dtmf-detect

WebAudio demo to detect touch-tone DTMF codes (phone keys)

dynamics-ax

Dynamics AX

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

how-i-hacked-your-pi-hole

jaws

JAWS - Just Another Windows (Enum) Script

jsteg

JPEG steganography

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

magic-checklist-for-web-applications

Web Security Checklist (Bug Bounty & Pentesting)

misc

misc

nosql-mongodb-injection-username-password-enumeration

Using this script, we can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest

:no_entry: offsec batteries included