Azure Security Resources and Notes

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Tools to assess the DNS security of web applications

Advisories, proof of concept files and exploits that have been made public by @pedrib.

official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Zabbix Templates

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

Collections of Orange Tsai's public presentation slides.

Awesome note-taking apps for hackers & pentesters !

Security Guide for Developers (实用性开发人员安全须知)

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Red Team KubeCTL Cheat Sheet

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

The goal of this repository is to document the most common techniques to bypass AppLocker.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Run PowerShell with rundll32. Bypass software restrictions.

GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects

Faster Nmap Scanning with Rust

🐶 A curated list of Web Security materials and resources.