onlypwns Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

ad_resources

Active directory notes and resources

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

auto-gpt

An experimental open-source attempt to make GPT-4 fully autonomous.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-game-security

awesome game security [Welcome to PR]

azure-app-tools

Collection of tools to use with Azure Applications

bloodhound.py

A Python based ingestor for BloodHound

brute-ratel-c4-community-kit

This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 (https://bruteratel.com/)

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

capev2

Malware Configuration And Payload Extraction

certipy---ad

Tool for Active Directory Certificate Services enumeration and abuse

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

chirp

A DFIR tool written in Python.

cloudfox

Automating situational awareness for cloud penetration tests.

code-understanding-tools

Tools for understanding other people's code

crackmapexec

A swiss army knife for pentesting networks

ctf_writeups

A collection of writeups

cupp

Common User Passwords Profiler (CUPP)

cve-2021-3560-polkit-privilege-esclation

cve-2022-40684

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

cve-2023-22515-poc

Poc for CVE-2023-22515

decodify

Detect and decode encoded strings, recursively.

deepbluecli

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

didierstevenssuite

Please no pull requests for this repository. Thanks!

disctopia-c2

Windows Remote Administration Tool that uses Discord, Telegram and GitHub as C2s

dissect-docs

Dissect documentation project