rosonsec Goto Github PK

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

awesome-httprequestsmuggling

A curated list of awesome blogs and tools about HTTP request smuggling attacks. Feel free to contribute! 🍻

awesome-remote-job

A curated list of awesome remote jobs and resources. Inspired by https://github.com/vinta/awesome-python

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

betterbugbounty

BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!

blueteam

Blue Team Resources

cheatsheets

My cheatsheets, mostly about pentesting

clickjacking

An example html page that loads http://localhost:3001/ into an iframe to demonstrate a clickjacking attack

cve-2020-5902

Proof of concept for CVE-2020-5902

cve-2022-0540-preauth-rce

Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540）

cve-2022-26133

Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification and exploitation.

defense

Resources about Information security defense, detection, best pratices...

digitalinnovation.github.io

exploits

Public exploits and modifications

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

firefox-webtesting-preference

Firefox configuration settings for web application testing

fuzzing

Fuzzing Resources

hob0rules

Password cracking rules for Hashcat based on statistics and industry patterns

htshells

Self contained htaccess shells and attacks

kali

Kali postinstallation script for Virtual Box machines installed from iso images

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

mimipenguin

A tool to dump the login password from the current linux user

ms17-010

MS17-010

oscp

Collection of things made during my OSCP journey

oscprepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

payfit.github.io

pentest

:no_entry: offsec batteries included

pentesting

Pentesting Resources

polarbearrepo