nicosmash Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

azure-policy

Repository for Azure Resource Policy built-in definitions and samples

cve-2021-43798_exploit

cve-2022-0847-dirtypipe-exploits

A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.

dvwa

Damn Vulnerable Web Application (DVWA)

ethhack-ebooks

A collection of some really cool Ebooks related to Ethical Hacking and Penetration Testing.

gvmd

Greenbone Vulnerability Manager - The database backend for the Greenbone Vulnerability Management (GVM) framework

ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers.

l3

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

privesccheck

Privilege Escalation Enumeration Script for Windows

rpcendpointmapper

Windows 7/2008 R2 EoP

rustscan

🤖 The Modern Port Scanner 🤖

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

universities

winpwn

Automation for internal Windows Penetrationtest / AD-Security