Contained is all my reference material for my OSCP preparation. Designed to be a one stop shop for code, guides, command syntax, and high level strategy. One simple clone and you have access to some of the most popular tools used for pentesting.

✭ 33

powershell shell PHP Batchfile perl python linux pentesting-windows linux-shell pentesting batch-script bash-script pentest-scripts oscp pentesting-networks pentesting-tools

ldapconsole

The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.

✭ 25

python search ldap active-directory pentesting bugbounty

kumasia

./kumasia php simple backdoor

✭ 13

PHP backdoor pentesting webshell php-backdoor pentest-tool phpbackdoor

Learning-Node.js-Security

A Collection of articles, videos, blogs, talks and other materials on Node.js Security

✭ 25

nodejs security penetration-testing web-security pentesting learning-nodejs nodejs-security nodejs-pentesting nodejs-secuirty-reading

CVE-2021-44228-PoC-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

✭ 760

java security exploit log4j hacking cybersecurity poc pentesting writeups bugbounty cve pentest payload red-team bugbounty-writeups security-writeups cve-2021-44228 bugbounttips cve-2021-45046 cve-2021-45105

365-Stealer

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

✭ 200

PHP CSS python javascript HTML azure phishing pentesting azuread redteam

MITM-cheatsheet

All MITM attacks in one place.

✭ 655

mitm cheatsheet pentesting mitm-attacks

Powerexploit

Post-Exploitation 😎 module for Penetration Tester and Hackers.

✭ 26

powershell pentesting post-exploitation scanning vulnerability-assessment powershell-module

attack-surface-detector-zap

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

✭ 52

java security vulnerability pentesting dast

hackipy

Hacking, pen-testing, and cyber-security related tools built with Python.

✭ 26

python testing opensource tools tool scripts hacking cybersecurity penetration-testing free software testing-tools pentesting scapy ethical-hacking ethical penetration-test hackipy

conote-community

Conote 综合安全测试平台社区版。

✭ 326

CSS python HTML javascript SCSS shell django pentesting

VulWebaju

VulWebaju is a platform that automates setting up your pen-testing environment for learning purposes.

✭ 53

shell hacking penetration-testing pentesting bugbounty hacktoberfest owasp-top-10

behindflare

This tool was created as a Proof of Concept to reveal the threats related to web service misconfiguration using CloudFlare as reverse proxy and WAF

✭ 14

go cloudflare pentesting pentest-tool behindflare

dark-lord-obama

AV-evading Pythonic Reverse Shell with Dynamic Adaption Capabilities

✭ 61

python encoding obfuscation encryption hacking penetration-testing rat pentesting reverseshell oscp c2 command-and-control oscp-tools

onedrive user enum

onedrive user enumeration - pentest tool to enumerate valid onedrive users

✭ 223

python osint onedrive enumeration pentesting office365 user-enumeration o365 onedrive-users

brutas

Wordlists and passwords handcrafted with ♥

✭ 32

python security wordlist enumeration pentesting passwords password-cracking redteam

ObsidianSailboat

Nmap and NSE command line wrapper in the style of Metasploit

✭ 36

C#cli command-line service-discovery nmap pentesting appsec hacking-tool security-scanner information-gathering security-tools nmap-scripts nsescript pentest-tool nmap-commands

Damn-Vulnerable-Bank

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

✭ 379

java javascript c HTML Makefile Dockerfile CMake android security hacking infosec application-security pentesting android-security hacktoberfest vulnerable-application vulnerable-android-apps damn-vulnerable-bank

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

✭ 306

python shell wordpress cms application web drupal typo3 version pentesting bugbounty content-management-system wordlists

maalik

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

✭ 75

c python windows remoteaccess dll network malware hacking penetration-testing rat infosec pentesting netsec exploitation payload network-security reflective-injection pivoting dllinjection

reconmap

Vulnerability assessment and penetration testing automation and reporting platform for teams.

✭ 242

javascript security hacking penetration-testing bug-bounty vulnerability infosec pentesting vulnerability-management security-automation devsecops collaboration-platform

BeFree

Website Security, Antivirus & Firewall || a powerful application that can secure your website against hackers, attacks and other incidents of abuse

✭ 24

PHP Smarty firewall pentesting security-vulnerability security-tools web-security-research

Ubunter

An automated tool to turn your ubuntu machine into a hacking lab

✭ 17

shell linux ubuntu labs pentesting

MailRipV3

SMTP and IMAP checker / cracker for mailpass combolists with a user-friendly GUI, automated inbox test and many more features.

SQL-Injection-cheat-sheet

Cheatsheet to exploit and learn SQL Injection.

✭ 69

sql cheatsheet pentesting exploitation sqlinjection

oscp-omnibus

A collection of resources I'm using while working toward the OSCP

✭ 46

configs scripts hacking talks penetration-testing videos readings infosec pentesting offensive-security offsec oscp pwk

awesome-bluetooth-security

List of Bluetooth BR/EDR/LE security resources

✭ 220

security awesome bluetooth penetration-testing ble bluetooth-low-energy awesome-list pentesting bluetooth-security bluetooth-hacking

Shelly

Automatic Reverse Shell Generator

✭ 38

shell reverse-shell telnet netcat pentesting offensive-security pearl redteam

SharpUnhooker

C# Based Universal API Unhooker

✭ 255

C#windows dll pentesting windows-api red-team av-evasion

ldap2json

The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.

✭ 56

python export ldap json analysis active-directory pentesting bugbounty

d00r

Simple directory brute-force tool written with python.

✭ 35

python linux security crawler login bruteforce brute-force pentesting hunt hunter directory-lister security-tools termux-hacking

transportc2

PoC Command and Control Server. Interact with clients through a private web interface, add new users for team sharing and more.

✭ 22

python HTML javascript powershell CSS shell pentesting c2 pentest-tool command-and-control redteam

BackToMe

Little tool made in python to create payloads for Linux, Windows and OSX with unique handler

✭ 61

python shell windows linux backdoor osx listener penetration-testing pentesting post-exploitation backdoors fud payload-generator

ReverseShellDll

C++ Windows Reverse Shell - Universal DLL Hijack | SSL Encryption | Statically Linked

✭ 69

C++c windows encryption reverse-shell dll pentesting redteam

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

✭ 315

go templates penetration-testing pentesting nuclei bugbounty nuclei-templates

argus

Argus Advanced Remote & Local Keylogger For macOS and Windows

✭ 87

python macos monitoring gmail hacking windows-10 cybersecurity penetration-testing macosx keylogger pentesting pentest cyber-security ethical-hacking social-engineering keylogging pentesting-tools ethical-hacking-tools

ggtfobins

Get GTFOBins info about a given exploit from the command line

✭ 27

go Dockerfile linux security enumeration penetration-testing infosec pentesting ctf security-tools oscp privesc gtfobins penetration-testing-tools

Dumb

Dumain Bruteforcer - a fast and flexible domain bruteforcer

✭ 54

haskell dns domain bruteforce subdomain pentesting pentest-tool subdomain-brute

OWASP-Calculator

🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment

✭ 109

HTML javascript CSS guide hacking owasp pentesting calculator-application

GoRAT

GoRAT (Go Remote Access Tool) is an extremely powerful reverse shell, file server, and control plane using HTTPS reverse tunnels as a transport mechanism.

✭ 34