gabyavra Goto Github PK

bruteforce-lists

Some files for bruteforcing certain things.

burp-lab-solutions

Slightly Expanded solutions for the Burp Labs

bypass-403

A simple script just made for self use for bypassing 403

canarytokenscanner

Script designed to identify Canary Tokens within Microsoft Office documents and Acrobat Reader PDF (docx, xlsx, pptx, pdf).

certmitm

A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.

chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

chisel

A fast TCP/UDP tunnel over HTTP

cloakquest3r

Uncover the true IP address of websites safeguarded by Cloudflare

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

conpot

ICS/SCADA honeypot

container-security-checklist

Checklist for container security - devsecops practices

crackmapexec

A swiss army knife for pentesting networks

cve-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907

cve-2022-21907-http.sys

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

cyber-bookmarks

A list of bookmarks I have used since I started my journey in cyber security

data

APTnotes data

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

doldrums

A Flutter/Dart reverse engineering tool

dvwa

Damn Vulnerable Web Application (DVWA)

dvws-node

Damn Vulnerable Web Services is a vulnerable web service and API that can be used to learn about webservices/API related vulnerabilities.

echoip

IP address lookup service

elitewolf

OT security monitoring #nsacyber

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

evil-winrm

The ultimate WinRM shell for hacking/pentesting

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilginx3-phishlets

This repository provides penetration testers and red teams with an extensive collection of dynamic templates designed specifically for use with Evilginx3.

evilgophish

evilginx2 + gophish

experienced-pentester-osep