davijones Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-security-trivia

🤙 Security Trivia that rare people know.

awesome-web-security

🐶 A curated list of Web Security materials and resources.

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

beginner-network-pentesting

Notes for Beginner Network Pentesting Course

beroot

Privilege Escalation Project - Windows / Linux / Mac

books

Free Online Books

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugcrowd_university

Open source education content for the researcher community

dostoevsky-pentest-notes

Notes for taking the OSCP in 2097. Read in book form on GitBook

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

my-learnings

My Learnings throughout the Journey

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

ohmyzsh

🙃 A delightful community-driven (with 1700+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

oscp

OSCP cheatsheet

oscp-command-filtering-tool

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

Custom pentesting tools

pentesting-bible

Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

security

Stuff about it-security that might be good to know

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.