onlypwns Goto Github PK

dsinternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

dvwa

Damn Vulnerable Web Application (DVWA)

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

fetch-some-proxies

Simple Python script for fetching "some" (usable) proxies

flipper-zero-badusb

Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

hackthebox-2022_ctf_writeups

hackthebox-cyberapocalypse2023-ctf-writeups

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hash_extender

havoc

The Havoc Framework

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

htb-writeup

Hack The Box writeup for Paper

impacket

Impacket is a collection of Python classes for working with network protocols.

infosec-cheat-sheets

I do not own nor did I create these. I simply found publicly available cheat sheets and compiled a list for InfoSec students. This list contains a variety of screenshots for Tools/Networking Concepts/Cryptography/Linux Commands/OSINT/Python/etc.

jakoby-powershell-for-hackers

FORKED: This repository is a collection of powershell functions every hacker should know.

kerberoasting

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

lapsdumper

Dumping LAPS from Python

lapstoolkit

Tool to audit and attack LAPS environments

linikatz

linikatz is a tool to attack AD on UNIX

log4jtools

Tools for investigating Log4j CVE-2021-44228

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

msdorkdump

Google Dork File Finder

msticnb

MSTIC Notebook Components

msticpy

Microsoft Threat Intelligence Security Tools

nba_machinelearning

Machine Learning project with NBA stats regular season 2021

netcat-bhp

netcat from blackhat

nlp_project

Natural Language Processing project