berkotako Goto Github PK

2020submissions

Pwn2Win CTF 2020 flag submissions

afl

american fuzzy lop - a security-oriented fuzzer

ahmyth-android-rat

Android Remote Administration Tool

allatori-v3.0

Allatori v3.0 source code.

amass

In-depth Attack Surface Mapping and Asset Discovery

androspy

An Android RAT that written in C# by me

attack-arsenal

A collection of red team and adversary emulation resources developed and released by MITRE.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

attack-scripts

Scripts and a (future) library to improve users' interactions with the ATT&CK content

autohosp

autosubtakeover

A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible.

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awae-preparation

This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

awesome-windows-red-team

A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams

bin2sc

Binary to shellcode from an object/executable format 32 & 64-bit PE , ELF

blog_html_smuggle

İtems for Initial Compromise with XSS and HTML Smuggle Blog

bloodhound

Six Degrees of Domain Admin

books-raspberrypimagazines

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

bug-bounty-toolz

BBT - Bug Bounty Tools

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

censys-subdomain-finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

ceylogger

Basic c-keylogger