bhishma14 Goto Github PK

peas

PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.

pentestgpt

A GPT-empowered penetration testing tool

pipers

A file-based task automation toolkit

privexchange

Exchange your privileges for Domain Admin privs by abusing Exchange

puredns

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

quickxss

Automating XSS using Bash

racepwn

Race Condition framework

recon_methodology

recon from my perspective

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

redteam-offensivesecurity

Tools & Interesting Things for RedTeam Ops

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

rengine

reNgine is a reconnaissance engine(framework) that does end-to-end reconnaissance with the help of highly configurable scan engines and does information gathering about the target web application. reNgine makes use of various open-source tools and makes a configurable pipeline of reconnaissance.

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

rogue-jndi

A malicious LDAP server for JNDI injection attacks

ruler

A tool to abuse Exchange services

s3scanner

Scan for open S3 buckets and dump the contents

sandcastle

🏰 A Python script for AWS S3 bucket enumeration.

scant3r

ScanT3r - Module based Bug Bounty Automation Tool

scoutsuite

Multi-Cloud Security Auditing Tool

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secure-code-review-checklist

securecodingdojo

The Secure Coding Dojo is a platform for delivering secure coding knowledge.

securitytesting

shapeshifter

GraphQL security testing tool

shell_escaper

shuffledns

MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.