Brandon-Russell-1's Stars
AonCyberLabs/Windows-Exploit-Suggester
This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
411Hall/JAWS
JAWS - Just Another Windows (Enum) Script
PowerShellMafia/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
rasta-mouse/Watson
Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
rasta-mouse/Sherlock
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
rebootuser/LinEnum
Scripted Local Linux Enumeration & Privilege Escalation Checks
hmaverickadams/TCM-Security-Sample-Pentest-Report
Sample pentest report provided by TCM Security
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
sensepost/gowitness
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
tomnomnom/httprobe
Take a list of domains and probe for working HTTP and HTTPS servers
owasp-amass/amass
In-depth attack surface mapping and asset discovery
tomnomnom/assetfinder
Find domains and subdomains related to a given domain
calebstewart/CVE-2021-1675
Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
cube0x0/CVE-2021-1675
C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527
dirkjanm/CVE-2020-1472
PoC for Zerologon - all research credits go to Tom Tervoort of Secura
ProjectOpenSea/seaport
Seaport is a marketplace protocol for safely and efficiently buying and selling NFTs.
PlumHound/PlumHound
Bloodhound Reporting for Blue and Purple Teams
Tib3rius/Pentest-Cheatsheets
hackykhaki/OSCP-1
OSCP Prep notes
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
laramies/theHarvester
E-mails, subdomains and names Harvester - OSINT
dirkjanm/mitm6
pwning IPv4 via IPv6
Gr1mmie/sumrecon
Web recon script. No need to fear, sumrecon is here!
TCM-Course-Resources/Practical-Ethical-Hacking-Resources
Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course
gentilkiwi/mimikatz
A little tool to play with Windows security
21y4d/nmapAutomator
A script that you can run in the background!
Tib3rius/AutoRecon
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
blackploit/hash-identifier
Software to identify the different types of hashes used to encrypt data and especially passwords
SHathi28/Ethical-Hacking-Python-Scripts
Repository for security-related Python scripts.
ieshreya/Obsidian-Cheat-Sheet
all the basic cheatsheets you need to get started to make notes in obsidian.