qemm Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

armory

My tools

armory3

The 802.11 Hacking Repo.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

awesome-waf

🔥 Everything about web-application firewalls (WAF).

ble-security-attack-defence

✨ Purpose only! The dangers of Bluetooth Low Energy（BLE）implementations: Unveiling zero day vulnerabilities and security flaws in modern Bluetooth LE stacks.

bluescan

A powerful Bluetooth scanner for scanning BR/LE devices, LMP, SDP, GATT and vulnerabilities!

bombers

SMS/Email/Whatsapp bombers Collection :bomb::bomb::bomb: :boom:

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cryptanalysis

This is my personal (big) recopilation about cryptanalysis, crypto tools and challenges

ctf-tools

Some setup scripts for security research tools.

cve-2020-16938

Bypassing NTFS permissions to read any files as unprivileged user.

cve-2021-26855

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

ddos-rootsec

DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)

dvws-node

Damn Vulnerable Web Service is a vulnerable web service/API/application that can be used to learn webservices/API vulnerabilities.

eicar-standard-antivirus-test-files

eicar standard antivirus test files

example-intruder-payloads

festin

FestIn - S3 Bucket Weakness Discovery

flare-vm

gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

guillotina

Python AsyncIO data API to manage billions of resources

holehe

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

joomlasqli

Sqli Blind Timebased on Joomla + Viertuemart + aweb-cartwatching-system <=2.6.0

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

kaonashi

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

lockup

A proof-of-concept Android application to detect and defeat some of the Cellebrite UFED forensic toolkit extraction techniques.