cyb3rnaut Goto Github PK

apkhack-backdoor

ApkHack-BackDoor is a shell script that simplifies the process of adding a backdoor to any Android APK file.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

collabfiltrator

Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

crest-exam-prep

Cheatsheets and write ups for the CREST CRT and CCT Exams.

crest-mock-exam

CREST CCT Mock Exam Paper

cyb3rnaut.github.io

dark-web-osint-tools

OSINT Tools for the Dark Web

dsvpwa

Damn Simple Vulnerable Python Web Application

dvpwa

Damn Vulnerable Python Web App

evtx-attack-samples

Windows Events Attack Samples

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

jwtear

Modular command-line tool to parse, create and manipulate JWT tokens for hackers

jwx

Implementation of various JWx (Javascript Object Signing and Encryption/JOSE) technologies

kin-openapi

OpenAPI 3.0 (and Swagger v2) implementation for Go (parsing, converting, validation, and more)

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

macos-attack-dataset

JSON DataSet for macOS mapped to MITRE ATT&CK Tactics.

onelistforall

Rockyou for web fuzzing

pcap-attack

PCAP Samples for Different Post Exploitation Techniques

powermemory

Exploit the credentials present in files and memory

poweroutlook

Sample code from Owning MS Outlook with Powershell

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

recon-tools

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

rexsser

This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.

safety

Safety checks your installed dependencies for known security vulnerabilities

securitytesting

serpico

SimplE RePort wrIting and COllaboration tool