List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Various tips & tricks

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

AntiVirus Evasion Tool

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

Collection of pentesting scripts

Demonized Shell is an Advanced Tool for persistence in linux.

Automated brute-forcing attack tool.

NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications

The CAN Injection Toolkit

This is a weaponized WSUS exploit

Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.

Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)

SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environments.

Fake Root Termux

sub53 is a Lightening Fast subdomain hunter that uses CA certificates to Hunt Down subdomains and can also do multi-threaded filtering of alive domains

Automated brute-forcing attack tool.