oncyberwar Goto Github PK

bludit-cms-brute-force-mitigation-bypass

Bludit CMS Brute Force Mitigation Bypass

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cve-2022-1388

cURL one-liner to test for CVE-2022-1388 BIG-IP iControl REST RCE

evil-winrm

The ultimate WinRM shell for hacking/pentesting

finger-user-enum

Username guessing tool primarily for use against the default Solaris finger service. Also supports relaying of queries through another finger server.

impacket

Impacket is a collection of Python classes for working with network protocols.

joomscan

OWASP Joomla Vulnerability Scanner Project

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-privilege-escalation-resources

Compilation of Resources for TCM's Linux Privilege Escalation course

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesting-notes

Pentesting notes

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

rubeus

Trying to tame the three-headed dog.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

singlepaged

SinglePaged - Simple Jekyll template

sql-injection-payload-list

🎯 SQL Injection Payload List

tcm-security-sample-pentest-report

Sample pentest report provided by TCM Security

warmap-go

web-shells

Some of the best web shells that you might need

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.