osintuk Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

apidetector

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

dark-web-archives

Archives of the criminal side of the internet

documents

TXT and PDF documents from the NSA

goby-poc

439个goby poc，可能会有重复自行判断，来源于网络收集的Goby&POC，实时更新。

gpredict

Gpredict satellite tracking application

kenzerdb

automated bug hunting with kenzer

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

nuclearpond

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

nuclei-templates

Community curated list of templates for the nuclei engine to find a security vulnerability in application.

parallelsdesktopcrack

Parallels Desktop for mac Crack

phishing_catcher

Phishing catcher using Certstream

r2d2

radare2 plugin for GPT-4

radare2

UNIX-like reverse engineering framework and command-line toolset

search.0t.rocks

securecookie

Fast, secure and efficient secure cookie encoder/decoder

shiro-exploit

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

trufflehog

Find and verify credentials

up-or-down

📈 Uptime monitor and status page for OsintUK, powered by @upptime

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

yara_detection_engineering

Detection Engineering with YARA