The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious behavior

A curated list of various bug bounty tools

KQL Queries. Microsoft Defender, Microsoft Sentinel

OSINT tool that allows you to find a person's accounts and emails + breached emails 🕵️

🎯 Open Redirect Payload List

HackTheBox Certified Penetration Tester Specialist Cheatsheet

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

Curated list of public penetration test reports released by several consulting firms and academic security groups

!!! WORK IN PROGRESS !!! This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.

Advanced Pentesting cheatsheet for RED & PRO

Collection of scripts and tools related to the eCTHPv2 exam by INE.

a free, open source, cross platform Intelligence gathering tool.

a drop-in replacement for Nmap powered by shodan.io

Dark Web OSINT Tool

Powerful Python tool to analyze PDF documents

A script for DCS that uses group names to create a spawn menu.

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges.

fsociety Hacking Tools Pack – A Penetration Testing Framework

OSINT tool - gets data from services like shodan, censys etc. in one app

🔎 Hunt down social media accounts by username across social networks

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

DorkScout - Golang tool to automate google dork scan against the entiere internet or specific targets

Linux/Windows PrivEsc - Dark Mode Guides

hydra