anacosteira Goto Github PK

findfrontabledomains

Search for potential frontable domains

grouper2

Find vulnerabilities in AD Group Policy

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

kerberopsec

OPSEC safe Kerberoasting in C#

keytabextract

Extracts Key Values from .keytab files

microburst

A collection of scripts for assessing Microsoft Azure security

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

poc

Various PoCs

postexploittools

powersap

Powershell SAP assessment tool

powerzure

PowerShell framework to assess Azure security

pt

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

publications

red-team

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

redteam-offensivesecurity

Tools & Interesting Things for RedTeam Ops

review-checklists

This repo contains code and examples to operationalize spreadsheet-based checklists that can be used for Azure design reviews on multiple technologies.

roadtoken

roadtools

The Azure AD exploration framework.

rubeus

Trying to tame the three-headed dog.

scadapass

SCADA StrangeLove Default/Hardcoded Passwords List

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

shadowbrokersfiles

Cracked ShadowBrokers tools and latested dumps 😎

sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

sirs

Network and Computer Security course project: node.js crawler/scanner to find SQLi, XSS and Path Traversal vulnerabilities

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

studyscripts

Pentesting and Security scripts/exploits