mdr1337 Goto Github PK

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

bloodhound.py

A Python based ingestor for BloodHound

corsy

CORS Misconfiguration Scanner

crackmapexec

A swiss army knife for pentesting networks

ctf-pwn-tips

Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

examples

Use case-driven examples for using Puppeteer and headless chrome

exploit_development

Collection of python3 exploits written by me to practice exploit development. Also is good preparation for OSED-301 course released by offensive security.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

impacket

Impacket is a collection of Python classes for working with network protocols.

inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

lapstoolkit

Tool to audit and attack LAPS environments

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

offensiveinterview

Interview questions to screen offensive (red team/pentest) candidates

onelistforall

Rockyou for web fuzzing

osed-pre

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-book

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

red-team-tools

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

responder-windows

Responder Windows Version Beta

rubeus

Trying to tame the three-headed dog.