daveyshmave Goto Github PK

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

pack

PACK (Password Analysis and Cracking Kit)

packetsquirrel-payloads

The Official Packet Squirrel Payload Repository

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

parliament

AWS IAM linting library

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest-pivoting

A compact guide to network pivoting for penetration testings / CTF challenges.

pineapple-community-packages

WiFi Pineapple MK7 Community Packages

pineapple-modules

The Official WiFi Pineapple Module Repository for the WiFi Pineapple Mark 7

plunderbug-scripts

post-exploitation

Post Exploitation Collection

powerforensics

PowerForensics provides an all in one platform for live disk forensic analysis

powerless

Windows privilege escalation (enumeration) script designed with OSCP labs (legacy Windows) in mind

powershell

PowerShell for every system!

powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powertools

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

practical-ethical-hacking-resources

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

printspoofer

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

purplepanda

Identify privilege escalation paths within and across different clouds

pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

pyfuscation

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

race

RACE is a PowerShell module for executing ACL attacks against Windows targets.

rdpscan

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.