sancur Goto Github PK

sc-900

Study guide for the SC-900: Microsoft Security, Compliance, and Identity

sc-900.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

shadowspray

A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

sn1per

Attack Surface Management Platform | Sn1perSecurity LLC

snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

ssrfmap

Automatic SSRF fuzzer and exploitation tool

starkiller

Starkiller is a Frontend for PowerShell Empire.

threat-dragon

An open source threat modeling tool from OWASP

torbot

Dark Web OSINT Tool

toxssin

An XSS exploitation command-line interface and payload generator.

tryhackme

tryhackme-holo-report.md

Full report for Holo Lab in TryHackMe

userrecon

Find usernames across over 75 social networks

villain

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy for working as a team.

whids

Open Source EDR for Windows

windows-tool-box

Windows Tool box

winpwn

Automation for internal Windows Penetrationtest / AD-Security

wordlists

Wordlsits for BruteForce, Dictionnary, Rainbow Table etc...

wordlists-1

Various wordlists FR & EN - Cracking French passwords

writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.