Pinned Repositories
2020submissions
Pwn2Win CTF 2020 flag submissions
AFL
american fuzzy lop - a security-oriented fuzzer
AhMyth-Android-RAT
Android Remote Administration Tool
Allatori-v3.0
Allatori v3.0 source code.
attack-scripts
Scripts and a (future) library to improve users' interactions with the ATT&CK content
CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
Covenant
Covenant is a collaborative .NET C2 framework for red teamers.
Cyber-Search-Shortcuts
Browser Shortcuts for Cyber Security Related Online Services
screenlogger-scp
WinEnumPsh
Windows Simple Enumeration Script Example (PowerShell)
berkotako's Repositories
berkotako/eWPTXv2-Journey
This repository is intended for sharing files/tools/tutorials..etc that related to eWPTXv2 from eLearnSecurity
berkotako/discover
Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
berkotako/BloodHound
Six Degrees of Domain Admin
berkotako/cupp
Common User Passwords Profiler (CUPP)
berkotako/masscan
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
berkotako/WebClient
Official AngularJS web client for the ProtonMail secure email service.
berkotako/evil-winrm
The ultimate WinRM shell for hacking/pentesting
berkotako/wstg
The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.
berkotako/Amass
In-depth Attack Surface Mapping and Asset Discovery
berkotako/owasp-mstg
The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.
berkotako/zaproxy
The OWASP ZAP core project
berkotako/sqlmap
Automatic SQL injection and database takeover tool
berkotako/python-o365
A simple python library to interact with Microsoft Graph and Office 365 API
berkotako/simplify
Android virtual machine and deobfuscator
berkotako/pupy
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
berkotako/EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
berkotako/merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
berkotako/ruler
A tool to abuse Exchange services
berkotako/massdns
A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
berkotako/VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
berkotako/xray
XRay is a tool for recon, mapping and OSINT gathering from public networks.
berkotako/skylift
Wi-Fi Geolocation Spoofing with the ESP8266
berkotako/awesome-industrial-control-system-security
A curated list of resources related to Industrial Control System (ICS) security.
berkotako/wifijammer
Continuously jam all wifi clients/routers
berkotako/WatchAD
AD Security Intrusion Detection System
berkotako/screenlogger-scp
berkotako/GreatSCT
The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.
berkotako/Invoke-Obfuscation
PowerShell Obfuscator
berkotako/AWAE-PREP
This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.
berkotako/autoSubTakeover
A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible.