tjsquishface's Stars
minimaxir/big-list-of-naughty-strings
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
skylot/jadx
Dex to Java decompiler
maurosoria/dirsearch
Web path scanner
aquasecurity/kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
michenriksen/aquatone
A Tool for Domain Flyovers
Ne0nd0g/merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
OlivierLaflamme/Cheatsheet-God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
tanprathan/MobileApp-Pentest-Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
infosecn1nja/AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
GhostPack/Rubeus
Trying to tame the three-headed dog.
GhostPack/Seatbelt
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
paradoxxxzero/butterfly
A web terminal based on websocket and tornado
find-sec-bugs/find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
ustayready/fireprox
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
api0cradle/LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
byt3bl33d3r/SprayingToolkit
Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient
Arvanaghi/SessionGopher
SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.
evilsocket/bleah
This repository is DEPRECATED, please use bettercap as this tool has been ported to its BLE modules.
hausec/ADAPE-Script
Active Directory Assessment and Privilege Escalation Script
slyth11907/Cheatsheets
Helped during my OSCP lab days.
securing/gattacker
A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks
chryzsh/DarthSidious
Building an Active Directory domain and hacking it
CyDefUnicorn/OSCP-Archives
An archive of everything related to OSCP
Coalfire-Research/java-deserialization-exploits
A collection of curated Java Deserialization Exploits
nccgroup/azucar
Security auditing tool for Azure environments
gehaxelt/Python-dsstore
A library for parsing .DS_Store files and extracting file names
sud0woodo/DCOMrade
Powershell script for enumerating vulnerable DCOM Applications
m8sec/enumdb
Relational database brute force and post exploitation tool for MySQL and MSSQL
jenkinsci/contrast-continuous-application-security-plugin
Jenkins Plugin from Contrast Security
puckel/Cheatsheets
Penetration Testing/Security Cheatsheets