C-Cracks / Oscp Automation
A collection of personal scripts used in hacking excercises.
Stars: ✭ 118
Programming Languages
powershell
5483 projects
Projects that are alternatives of or similar to Oscp Automation
Dirsearch
Web path scanner
Stars: ✭ 7,246 (+6040.68%)
Mutual labels: hacking, penetration-testing, brute-force, enumeration
Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
Stars: ✭ 1,824 (+1445.76%)
Mutual labels: hacking, penetration-testing, enumeration
Crithit
Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
Stars: ✭ 182 (+54.24%)
Mutual labels: hacking, penetration-testing, enumeration
Ctf Notes
Everything needed for doing CTFs
Stars: ✭ 304 (+157.63%)
Mutual labels: hacking, penetration-testing, enumeration
Nosqlmap
Automated NoSQL database enumeration and web application exploitation tool.
Stars: ✭ 1,928 (+1533.9%)
Mutual labels: hacking, penetration-testing, enumeration
A Red Teamer Diaries
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Stars: ✭ 382 (+223.73%)
Mutual labels: hacking, penetration-testing, enumeration
Fdsploit
File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
Stars: ✭ 199 (+68.64%)
Mutual labels: hacking, penetration-testing, enumeration
Active Directory Exploitation Cheat Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
Stars: ✭ 870 (+637.29%)
Mutual labels: hacking, penetration-testing, enumeration
Active Directory Exploitation Cheat Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
Stars: ✭ 1,392 (+1079.66%)
Mutual labels: hacking, penetration-testing, enumeration
Payloadsallthethings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Stars: ✭ 32,909 (+27788.98%)
Mutual labels: hacking, penetration-testing, enumeration
Interlace
Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
Stars: ✭ 760 (+544.07%)
Mutual labels: hacking, penetration-testing, enumeration
Scilla
🏴☠️ Information Gathering tool 🏴☠️ DNS / Subdomains / Ports / Directories enumeration
Stars: ✭ 116 (-1.69%)
Mutual labels: hacking, penetration-testing, enumeration
Givingstorm
Infection vector that bypasses AV, IDS, and IPS. (For now...)
Stars: ✭ 72 (-38.98%)
Mutual labels: hacking, penetration-testing
Resources
A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.
Stars: ✭ 62 (-47.46%)
Mutual labels: hacking, penetration-testing
Beef Over Wan
Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]
Stars: ✭ 82 (-30.51%)
Mutual labels: hacking, penetration-testing
One Lin3r
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
Stars: ✭ 1,259 (+966.95%)
Mutual labels: hacking, penetration-testing
Hackphiles
BruteForce Tool For both Instagram and Facebook
Stars: ✭ 57 (-51.69%)
Mutual labels: hacking, brute-force
Gitjacker
🔪 Leak git repositories from misconfigured websites
Stars: ✭ 1,249 (+958.47%)
Mutual labels: hacking, penetration-testing
In Spectre Meltdown
This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in
Stars: ✭ 86 (-27.12%)
Mutual labels: hacking, penetration-testing
Erodir
A fast web directory/file enumeration tool written in Rust
Stars: ✭ 94 (-20.34%)
Mutual labels: penetration-testing, enumeration
OSCP-Automation
A collection of personal scripts used in hacking excercises. Consider a majority of them in beta- useable but I will probably improve them as time goes on. :) There's also some notes on web app and OS vulnerabilties, in addition to pointers for useful commands etc. https://c-cracks.tumblr.com/
Please note that bugs will come and go due to constant development- it's worth checking back if you've discovered a bug or addressing it yourself as I will only notice it when using the script (which at present isn't much as I mass scanned some targets a few weeks ago.)
enum.sh
- Performs an Nmap scan on the provided IP and further Wfuzz and Nikto scans on discovered web servers (per port found to be a web server)
- Very basic in nature and I'm sure there's more intuitive tools out there; I'm building my own collection of scan automation tools.
- Coming along but I'm experiencing performance issues around the nmap scan- it's commonly hanging for me. Feel free to tweak this for your needs; I'll be working on this soon.
Linux/privesc.sh
- Automation of info gathering for Linux privilege escalation
- Can be used even if upload to the victim isn't possible as a reference
test-methods.sh
- Sends requests under different methods to the provided URL
- Appearance of the output leaves alot to be desired; as long as it's clear where each request ends I don't mind. xD
brute-force.sh
- Brute force web applications with cURL
- Handles GET and POST requests currently with the options to add cookies and/or headers to the request
- POST has been tested thoroughly against the VM Mr Robot with the right credentials being discovered and I have also tested the addition of headers and/or cookies.
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].