charchitt Goto Github PK

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

attiny85

RubberDucky like payloads for DigiSpark Attiny85

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

checklist

ctf

Some basic CTF stuff Team Bla

ctf-difficulty

This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.

ctf-notes

Everything needed for doing CTFs

cve

CVE, reports, research

devops

devops1

dvna

Damn Vulnerable NodeJS Application

exploiting-simple-buffer-overflows-on-win32

:floppy_disk: Exploiting Simple Buffer Overflows on Win32

fuzzdb

一个fuzzdb扩展库

happy-birthday

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

lfi-phpwrappers

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

malicious-wordpress-plugin

Simply generates a wordpress plugin that will grant you a reverse shell once uploaded. I recommend installing Kali Linux, as msfvenom is used to generate the payload.

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

open-redirect-payload-list

🎯 Open Redirect Payload List

oscp-2

Collection of things made during my OSCP journey

oswe

OSWE Preparation

oswe-1

Preparation for OSWE

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

practice-scripts

Just some practice scripts for automation of exploits

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

scripts

search-machine

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

splunkwhisperer2

Local privilege escalation, or remote code execution, through Splunk Universal Forwarder (UF) misconfigurations