a05110511t's Stars
peass-ng/PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
mitre/caldera
Automated Adversary Emulation Platform
payloadbox/sql-injection-payload-list
🎯 SQL Injection Payload List
mgramin/awesome-db-tools
Everything that makes working with databases easier
lc/gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
tomnomnom/waybackurls
Fetch all the URLs that the Wayback Machine knows about for a domain
vletoux/pingcastle
PingCastle - Get Active Directory Security at 80% in 20% of the time
sensepost/ruler
A tool to abuse Exchange services
bigb0sss/RedTeam-OffensiveSecurity
Tools & Interesting Things for RedTeam Ops
gquere/pwn_jenkins
Notes about attacking Jenkins servers
fortra/nanodump
The swiss army knife of LSASS dumping
glmcdona/Process-Dump
Windows tool for dumping malware PE files from memory back to disk for analysis.
BankSecurity/Red_Team
Some scripts useful for red team activities
Yaxser/Backstab
A tool to kill antimalware protected processes
antonioCoco/SharPyShell
SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
BloodHoundAD/SharpHound
C# Data Collector for BloodHound
Group3r/Group3r
Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.
dev-2null/ADCollector
A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.
vu-ls/Crassus
senzee1984/EDRPrison
Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry
Jean-Francois-C/Windows-Penetration-Testing
Technical notes, AD pentest methodology, list of tools, scripts and Windows commands that I find useful during internal penetration tests and assumed breach exercises (red teaming)
malvads/sqlmc
Official Kali Linux tool to check all urls of a domain for SQL injections :)
hevalhazalkurt/codewars_python_solutions
My codewars solutions in Python.
davesc63/GeoPort
GeoPort: Your Location, Anywhere! The iOS location simulator
curtishoughton/Penetration-Testing-Cheat-Sheet
A guide to help people who are new to penetration testing and are looking to gain an overview of the penetration testing process. This guide will help anyone hoping to take the CREST CRT or Offensive Security's OSCP exam and will aim to cover each stage of compromising a host.
mthbernardes/LFI-Enum
Scripts to execute enumeration via LFI
botesjuan/PenTestMethodology2022
PenTest Methodology
YagamiShadow/lfi-fuzz
A python script to enumerate and attempt to get code execution from LFI vulnerabilities
MyFirstSecurity2020/MyfirstPWN
CpyRe/I-Find-CVE-2024
CVE