ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

container-security-checklist

Checklist for container security - devsecops practices

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

gsh-webui

Updated

gsih-web-ui

Web application UI for Gujarat Smart India Hackathon

hackathonproject

hacktivityconctf

hellotf

Getting started with TF

https-github.com-empireproject-empire

infosec-project

This is the project I have done to illustrate the usage of sqlmap in finding vulnerable parameters in a website, it uses a method of Parameter Tampering

mrhr6874

powershell-ad-recon

PowerShell Scripts I find useful

priv2admin

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

python-registry

Pure Python parser for Windows Registry hives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiftleft-java-demo

vanta

Animated 3D backgrounds for your website

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

writeups