fmok00

fmok00's Stars

• kafkaesqu3/aws-pentesting

  scripts for pentesting aws environments

  Language:Python31

• CyberSecArmy/AWS-Offensive-Exploitation---Pentesting

  This repository mainly focuses on various techniques, tools, frameworks and approach to perform offensive exploitation of AWS infrastructure, its various services and overall AWS cloud penetration testing.

  114

• ajinabraham/aws_security_tools

  Scripts and tools for AWS Pentest

  Language:Python5118

• hyd3sec/Azur3Alph4

  Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved) position.

  Language:PowerShell6220

• safebuffer/vulnerable-AD

  Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

  Language:PowerShell2k390

• docker/docker-bench-security

  The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

  Language:Shell9.2k1k

• sans-blue-team/DeepBlueCLI

  Language:PowerShell2.2k356

• ellerbrock/docker-tutorial

  :whale: Getting Started with Docker

  145

• ellerbrock/docker-security-images

  :closed_lock_with_key: Docker Container for Penetration Testing & Security

  22834

• vishnudxb/automated-pentest

  Minimal docker container of Parrot OS for running an automated scan & pentest report.

  Language:Shell19042

• Swordfish-Security/Pentest-In-Docker

  Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)

  Language:Dockerfile8341

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61.6k14.7k

• S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

  5.7k1.2k

• omkar-ukirde/api-pentesting

  API Pentesting notes.

  9636

• sbousseaden/macOS-ATTACK-DATASET

  JSON DataSet for macOS mapped to MITRE ATT&CK Tactics.

  15023

• p4lsec/fordpass

  Python3 script to interact with and retrieve data about your FordPass enabled vehicle

  Language:Python125

• ShawnDEvans/smbmap

  SMBMap is a handy SMB enumeration tool

  Language:Python1.8k348

• ccxt/ccxt

  A JavaScript / TypeScript / Python / C# / PHP cryptocurrency trading API with support for more than 100 bitcoin/altcoin exchanges

  Language:Python33.3k7.6k

• AndroBugs/AndroBugs_Framework

  AndroBugs Framework is an efficient Android vulnerability scanner that helps developers or hackers find potential security vulnerabilities in Android applications. No need to install on Windows.

  Language:Python1.1k344

• maaaaz/androwarn

  Yet another static code analyzer for malicious Android applications

  Language:HTML485159

• xtiankisutsa/MARA_Framework

  MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.

  Language:Python630175

• relarizky/wpxploit

  Simple Python Script For Performing XMLRPC Dictionary Attack

  Language:Python12519

• bananita/bananita.github.io

  Language:CSS1

• Redocly/redoc

  📘 OpenAPI/Swagger-generated API Reference Documentation

  Language:TypeScript23.7k2.3k

• ystyle/jvms

  JDK Version Manager (JVMS) for Windows

  Language:Go60265

• tomac/yersinia

  A framework for layer 2 attacks

  Language:C727123

• iknowjason/voiphopper

  VoIP Hopper Network Penetration Testing Tool - Jumping from one VLAN to the next! A network infrastructure penetration testing security tool. A tool to test for the (in)security of VLANS. It can mimic the behavior of IP Phones to better understand business risks within an IP Telephony network infrastructure. VoIP Hopper is included in Kali Linux. This site is for up-to-date code. Documentation website:

  Language:Roff6711

• AloneMonkey/frida-ios-dump

  pull decrypted ipa from jailbreak device

  Language:JavaScript3.4k627

• Cukuyo/HijackAPP

  安卓activity劫持演示demo，包含指定activity位于前台时的劫持和指定进程位于前台时的劫持

  Language:Java133

• rapid7/DLLHijackAuditKit

  This toolkit detects applications vulnerable to DLL hijacking (released in 2010)

  Language:JavaScript5223