David B.

SUDO_KILLER. A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

EDR-Test. Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].

SCREEN_KILLER. This script was developed to track progress for reporting (capture screenshot, commands and outputs) during pentest engagement and OSCP.

OFFPORT_KILLER. This tool aims at automating the identification of potential service running behind ports identified manually either through manual scan or services running locally. The tool is useful when nmap or any scanning tool is not available and in the situation during which you did a manual port scanning and then want to identify the services running behind the identified ports.

genAvatar. This script was developped to assist in SpearPhishing campaign during Red Team operations. It can be used to generate random name based on country of origin, sex and how common the combination of surname and firstname can be.

CONFIG_KILLER. Script written in bash to identify and dump services config files

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

keepnote-rip. Keepnote is no more maintain on kali. Being used to keepnote, I tried to find a way to continue to use it as before on my fully upgraded kali. In this repo, I will explain how to do that.

linux-kernel-exploits. linux-kernel-exploits Linux平台提权漏洞集合

Ciphey. Automatically decode encryptions without a key, decode encodings, and crack hashes

ffuf. Fast web fuzzer written in Go

OSCPRepo. A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

MobaXterm-Decryptor. MobaXterm Decryptor

RTProgress. A Red Team Activity Hub

powershell-scripts-ms. Office 365 Reporting PowerShell Scripts

SOC-Ressources. Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IOC and monitoring.

DeadPotato. DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the original GodPotato source code by BeichenDream.

BlueTeam-Tools. Tools and Techniques for Blue Team / Incident Response

TTP-vectr. Test case indexes

hacktricks. Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

microsoft-architecture-pptx-icons. Microsoft Architecture Icons compiled in PowerPoint

MFASweep. A tool for checking if MFA is enabled on multiple Microsoft Services

OST-C2-Spec. Open Source C&C Specification

Internal-Monologue. Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

CMS-Hunter. CMS漏洞测试用例集合

LaZagne. Credentials recovery project

sshuttle. Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

suspicious. Suspicious is a powerful web application designed to help users submit and analyze emails, files, IP addresses, and URLs

windows-kernel-exploits. windows-kernel-exploits Windows平台提权漏洞集合

jok3r. Jok3r - Network and Web Pentest Framework

CTF. Shell