pentestmano Goto Github PK
Type: Organization
Type: Organization
Impacket is a collection of Python classes for working with network protocols.
IOXIDResolver.py from AirBus Security
KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
Discover and BruteForce LDAP Fields From Web App
A Proof-Of-Concept for the CVE-2021-44228 vulnerability.
This is a script written in Python that allows the exploitation of the Metabase's software security flaw in the described in CVE 2023-38646.
A little tool to play with Windows security
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
OSCP Preparation
Single-file PHP shell
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Pentest TeamCity using Metasploit
Proof of Concepts
PowerSploit - A PowerShell Post-Exploitation Framework
getsystem via parent process using ps1 & embeded c#
Python bindings for yescrypt: memory-hard, NIST-compliant password hashing
A python 3 library which helps in using nmap port scanner. This is done by converting each nmap command into a callable python3 method or function. System administrators can now automatic nmap scans using python
Red Teaming Tactics and Techniques
Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.
A malicious LDAP server for JNDI injection attacks
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
A Red Team tool for remotely manipulating Group Policy Object(GPO), Organizational Unit(OU), GPLink and Security Filtering
SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
[Linux] Two Privilege Escalation techniques abusing sudo token
The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.
TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.
Turtlepower is a collection of scripts I use to make boring repetive tasks I do in pentesting such as file transfers and setting up shells happen quick and easy so I can focus my energy on pwning.
Enumerate Typo3 version and extensions
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.