5k1pp Goto Github PK

antisquat

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-rce-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

awesome-red-team-operations

bug_bounty_tools_and_methodology

Bug Bounty Tools used on Twitch - Recon

bugbounty-tools

A curated list of various bug bounty tools

caldera

Automated Adversary Emulation Platform

ceh-in-bullet-points

💻 Certified ethical hacker summary in bullet points

cloudpeler

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

conferences

Conference slides

ethical-hacking

These are notes related to Ethical Hacking

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

linux101-resources

Resources for TCM Security Linux 101 course

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

my-profile

Config files for my GitHub profile.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-cheat-sheets

A collection of snippets of codes and commands to make your life easier!

pentips

CSbyGB PenTips Gitbook

practical-ethical-hacking-resources

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

red-team-engagement-simulation

A Red Team Engagement is a cybersecurity exercise designed to simulate real-world attacks and security breaches on an organization's systems, networks, and applications. The primary goal of a red team engagement is to identify vulnerabilities, weaknesses, and potential points of exploitation within an organization's defenses.

redteamrecipe.github.io

redteamrecipe.com

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

soc

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

tcm-security-sample-pentest-report

Sample pentest report provided by TCM Security

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.