yagamishadow Goto Github PK

1wordlist

Wordlist generated using leaked databases, Pipal, and CUPP.

active_directory

Notes and resources for the Active Directory YouTube series on https://youtube.com/JohnHammond010

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

amass

In-depth Attack Surface Mapping and Asset Discovery

anti-ddos

🔒 Anti DDOS | Bash Script Project 🔒

arcane

Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessary resources for APT repositories.

armor

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

asnrecon

ASN reconnaissance script

asphashdos

ASP.NET HashDoS PoC Payload

assetfinder

Find domains and subdomains related to a given domain

asvs

Application Security Verification Standard

autoenum

Automatic Service Enumeration Script

automated-xss-finder

Automated XSS Finder

awesome-default-passwords

An organized collection of default passwords for various devices and services.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-pentest

A collection of awesome penetration testing resources

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awesome-xss-payloads

Exotic and uncommon XSS Vectors to hit the target as quickly as possible.

awesomexss

Awesome XSS stuff

basebuildingplus

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

belati

The Traditional Swiss Army Knife for OSINT

benchmark

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

bloodhound

Six Degrees of Domain Admin

blue-team-cheat-sheets

Blue Team Cheat Sheats

breach-parse

A tool for parsing breached passwords

bulk_myspace_photo_download

This is a tampermonkey tamper monkey script that allows you to download all photos from an individual mix on myspace all at once. I logged into my myspace after a super long time and saw all my old photos so I went in and saw there was no super fast way to download all the high res photos at once so I made this.

chaff

Chaff Chrome Browser Extension

cheat.sh

the only cheat sheet you need