Juan Botes

Burp-Suite-Certified-Practitioner-Exam-Study. Burp Suite Certified Practitioner Exam Study

PenTestMethodology. A structured, actionable penetration testing methodology and checklist covering end-to-end engagement phases.

API-Web-Security. API Security University & PortSwigger Academy Study Notes

CISSP-Studies. CISSP Studies

mainframe-pentest. Mainframe Penetration Testing

Active-Directory-PowerShell-Scripts. PowerShell Scripts to aid in Enumeration

Obfuscating-Techniques-WAF-Bypass. Obfuscating Techniques to bypass WAF detection

CRTO-Study-Notes. crto-study-notes

Mobile-App-Pentest. Mobile Application Penetration Testing Setup

FireWall-Nmap-Scans. Sample NMAP scans targeted at Firewalls and systems behind the Firewalls.

OSCP-2022. Notes compiled for the OSCP exam.

Data-Exfiltrate. Using PHP upload page and Windows PowerShell to exfiltrate data

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

bypass-cmd-ps1. Windows bypass CMD & PowerShell Restriction

fake-login-credential-stealer. Fake Windows login page

GoogleDorks. Google Dork Sample Search Filters

Pentester-Toolbox. Penetration Testing Toolbox

Inject-Payload-API-Base64-body. Inject Payload into API that only accept base64 encode POST data

Map-Server-Relationships. Enumeration Connected Windows Servers

Breaking-out-LLM. Breaking out LLM constrains and build AI Task Assistant

BasicDropBox. Red Team Drop-box Assessment Tool - Raspberry Pi

pentest-practice-list. Practice Practical Penetration Testing Resources

POST-GET-server. Python3 HTTP server to get log POST and GET requests

ADTrackUserChanges. AD Track User Changes

AD-UnAuth-Enum. Active Directory unauthenticated enumeration Bash Script

Blind-CMD-injection-Test. Testing for blind command injection

JavaScriptInstaFileDownload. JavaScript with base64 variable value instantly download file