krupalb Goto Github PK

application-security

A place for all type of application security assessment checklist and cheatsheets.

attack-tools

Utilities for MITRE™ ATT&CK

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010 AKA EternalBlue

awesome-cloud-native-security

awesome resources about cloud native security 🐿

awesome-social-engineering

A curated list of awesome social engineering resources.

awscheatsheets

cleanvariables_example

A PHP example to sanitise data

cloud-native-security-book

《云原生安全：攻防实践与体系构建》资料仓库

examples

Kubernetes application example tutorials

fleetman-api-gateway

fleetman-position-simulator

fleetman-webapp

free5gc_notes

gcpcommands

Some important GCP commands, I've always found useful

impacket-examples-windows

The great impacket example scripts compiled for Windows

jenkins

k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

linux-exploit-suggester

Linux privilege escalation auditing tool

metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

now-you-see-me

Pass-thru web server for traffic redirection

oscp

Collection of things made during my OSCP journey

oscp-1

oscp study

oscp-2

OSCP cheet sheet

oscp-note

list of useful commands, shells and notes related to OSCP

pasties

A collection of random bits of information common to many individual penetration tests, red teams, and other assessments

pwdumpstats

Script to output stats around weak passwords and password re-use from an NtdsAudit (pwdump) file

red-team-management

reformat.py

scoutsuite

Multi-Cloud Security Auditing Tool

secret-magpie-cli

Secret Magpie - Secret Detection Tool