d0nttrustme,github

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

amass

In-depth DNS Enumeration and Network Mapping

This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible the process of setting up and maintaining the server.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cheatsheet-god

Penetration Testing / OSCP Biggest Reference Bank / Cheatsheet

cheatsheets

Helped during my OSCP lab days.

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

commonspeak

Content discovery wordlists generated using BigQuery

custom-bcheck-scan

This repository stores some of my custom BCheck Scan configurations. Its goal is to identify intriguing elements that warrant further manual testing.

cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

dalfox

🌘🦊 DalFox is an powerful open source XSS scanning tool and paramter analyzer, utility

dell-xps-9560

Tweaks for Dell XPS 9560

drupal-enum

Repository used to share Drupal enumeration tools for pentest need

free-security-ebooks

Free Security and Hacking eBooks

fuzzing

Fuzzing Payloads to Assist in Web Application Testing.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

keethief

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

masscan-to-csv

Converts the Masscan XML output option (-oX) to a csv format.

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

nmapautomator

A script that you can run in the background!

payload_dumper

Android OTA payload dumper

penetration-testing

List of awesome penetration testing resources, tools and other shiny things

polkit-exploit

Privilege escalation with polkit - CVE-2021-3560

privesccheck

Privilege Escalation Enumeration Script for Windows

s3scanner

Scan for open AWS S3 buckets and dump the contents

sherlock

🔎 Hunt down social media accounts by username across social networks

sitemap-parser

Python script used to extract unique URLs from a sitemap.xml file

ssti-payload

SSTI Payload Generator

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

d0nttrustme Goto Github PK

d0nttrustme's Projects

Recommend Projects

Recommend Topics

Recommend Org