Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Notes and custom scripts for DNS exfiltration

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

BlackLotus UEFI Windows Bootkit

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of Netlas.io.

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

Blue teamer tools and techniques

Red Teaming tools and techniques

The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin

Antivirus Signature Search Toolkit

ISO 27001 Toolkit by QZ

Bringing infosec community, group and leaders together that solve community challenges, problems, create cultural and provide value to Infosec community.

Curated list of public penetration test reports released by several consulting firms and academic security groups

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN…

Applied Purple Teaming - Infrastructure, Threat Optics, and Continious Improvement - June 6, 2020

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A curated list of resources that I recommend when asked about how to learn about Industrial Control Systems Cyber Security.

Google's Engineering Practices documentation

A fast TCP tunnel over HTTP

Phantom Orchestration Playbooks

GyoiThon is a growing penetration test tool using Machine Learning.

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectu…

The goal of this repository is to document the most common techniques to bypass AppLocker.

Repo for random stuff