ramihub Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

arjun

HTTP parameter discovery suite.

awae-prep

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

awesome-vulnerable-apps

Awesome Vulnerable Applications

bash_scripting

bash scripting thing !

bcrawl

bheem

bug-bounty

Ressources for bug bounty hunting

bugbounty_stuff

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

ctp-osce

Scripts I used during CTP

cve-2019-1579

cve-2021-1675

Impacket implementation of CVE-2021-1675

cve-2021-38647

CVE-2021-38647 - POC to exploit unauthenticated RCE #OMIGOD

cve-2021-40346

CVE-2021-40346 PoC (HAProxy HTTP Smuggling)

cve-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

devsecops-template

Set of security tools that can be integrated in Jenkins pipelines.

dirsearch

Web path scanner

ditto

A tool for IDN homograph attacks and detection.

dns-wordlists

part of my wordlist to bruteforce DNS to find subdoamains.

docker-vulnerability-environment

Use the docker to build a vulnerability environment

frogy

My subdomain enumeration script.

gfpgan

GFPGAN aims at developing Practical Algorithms for Real-world Face Restoration.

gixy

Nginx configuration static analyzer

gssmtp-csrf2xss2rce

http-request-smuggling

HTTP Request Smuggling Detection Tool

hunt

improhound

Identify the attack paths in BloodHound breaking your AD tiering

lilly

Tool to find the real IP behind CDNs/WAFs like cloudflare using passive recon by retrieving the favicon hash. For the same hash value, all the possible IPs, PORTs and SSL/TLS Certs are searched to validate the target in-scope.