elkhvn's Stars
winscripting/UAC-bypass
ambionics/phpggc
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
ly4k/PwnKit
Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation
FSecureLABS/SharpGPOAbuse
SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.
expl0itabl3/Toolies
Ad hoc collection of Red Teaming & Active Directory tooling.
Greenwolf/ntlm_theft
A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
dafthack/DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
arthaud/git-dumper
A tool to dump a git repository from a website
ffuf/ffuf
Fast web fuzzer written in Go
jetmore/swaks
Swaks - Swiss Army Knife for SMTP
fingerprintjs/fingerprintjs
Browser fingerprinting library. Accuracy of this version is 40-60%, accuracy of the commercial Fingerprint Identification is 99.5%. V4 of this library is BSL licensed.
The-Z-Labs/linux-exploit-suggester
Linux privilege escalation auditing tool
michenriksen/aquatone
A Tool for Domain Flyovers
laramies/theHarvester
E-mails, subdomains and names Harvester - OSINT
mailhog/MailHog
Web and API based SMTP testing
hanslub42/rlwrap
A readline wrapper
owtf/owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
mitmproxy/mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
wireghoul/dotdotpwn
DotDotPwn - The Directory Traversal Fuzzer
skelsec/pypykatz
Mimikatz implementation in pure Python
BeichenDream/GodPotato
0xJs/RedTeaming_CheatSheet
Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.
nicocha30/ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
sc0tfree/updog
Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.
nccgroup/ScoutSuite
Multi-Cloud Security Auditing Tool
hysnsec/awesome-threat-modelling
A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
jeremychoi/owasp-asvs-wstg-checklist
OWASP Application Security Checklist for testing (mapping ASVS with WSTG)
SpecterOps/Nemesis
An offensive data enrichment pipeline
OWASP/ASVS
Application Security Verification Standard
6mile/DevSecOps-Playbook
This is a step-by-step guide to implementing a DevSecOps program for any size organization