thelivestep Goto Github PK

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

printnightmare

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

rengine

reNgine is an automated reconnaissance framework for web applications

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

spoolfool

Exploit for CVE-2022–22718 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

tokentactics

Azure JWT Token Manipulation Toolset

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

villain

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy for working as a team.

wef

Wi-Fi Exploitation Framework

writeups

A handfull of writeups

wsob

😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

x8

Hidden parameters discovery suite

ysoserial.net

Deserialization payload generator for a variety of .NET formatters