treebuilder Goto Github PK

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

anonmap

anoNmap is a port scanner which utilizes Facebook's XSPA vulnerability to perform anonymous port scans.

attacking-and-auditing-docker-containers-and-kubernetes-clusters

Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters

attacksurfacemapper

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

autosploit

Automated Mass Exploiter

aws-scanner

Scans a list of websites for Cloudfront or S3 Buckets

azureadjoinedmachineptc

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

bugbounty

RepoToStoreBugBountyInfo

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

cheatsheets

This was originally posted by jshaw87. I wanted to keep a copy/update it on the off chance he took it down.

cloud-cidr

AWS,AZURE,GOOGLE CLOUD IP CIDRS

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

detect-sslmitm

This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.

dnsgrep

Quickly Search Large DNS Datasets

dvja

Damn Vulnerable Java (EE) Application

dvna

Damn Vulnerable NodeJS Application

enumerate-github-users

A script to create fake commits

findomain

The fastest and cross-platform subdomain enumerator, don't waste your time.

flightsim

A utility to generate malicious network traffic and evaluate controls

infinity

Infinity can get phone numbers from facebook accounts with some maths and shit.

infinity-hugo

Infinity Coming Soon Template Hugo Version by themefisher

inspy

A LinkedIn enumeration tool

ipinfo

Script to quickly enrich an IP address

isitbad

This program was made to check an IP/cidr againt known bad IP lists, spam lists, proxy lists, vpn lists, tor nodes, and known bot networks. As a cyber defender, all of the above could be potential threats. Please note: I do not maintain theses lists. If you have an inquiry/update for one of the lists, pelase go strait to the vendor who maintains the list

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

log4j-payload-generator

Log4j jndi injects the Payload generator

log4shell_jndiexploit

Among the existing Log4shell practice materials JNDIExploit v1.2

lootbox

Lootbox downloads open directories shared on Twitter.