skr1ptkid-0x Goto Github PK

ai-exploits

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

alfa

ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework

analyst-scripts

Scripts to analyze stuff

applejuice

Apple BLE proximity pairing message spoofing

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

awesome-osint

:scream: A curated list of amazingly awesome OSINT

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-responses

A collection of response templates for invalid bug bounty reports.

bugbounty-scans

aquatone results for sites with bug bountys

build_a_phish

Ansible playbook to deploy a phishing engagement in the cloud.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

css-exchange

Exchange Server support tools and scripts

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dfiq

DFIQ is a collection of investigative questions and the approaches for answering them

dot

The Deepfake Offensive Toolkit

ducky-scripts

Repo of Ducky scripts I have created for the O.MG Cable and FlipperZero

gateway-finder

Tool to identify routers on the local LAN and paths to the Internet

havoc

The Havoc Framework.

invictus-aws

keywords

killerbee

IEEE 802.15.4/ZigBee Security Research Toolkit

kubehound

Kubernetes Attack Graph

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

objection

📱 objection - runtime mobile exploration

open-cvdb

An open project to list all publicly known cloud vulnerabilities and CSP security issues

payloads

Git All the Payloads! A collection of web attack payloads.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pcredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

peirates

Peirates - Kubernetes Penetration Testing tool

pwnedpasswordsdll

Open source solution to check prospective AD passwords against previously breached passwords