Stars
The recursive internet scanner for hackers. 🧡
Azure Red Team tool for graphing Azure and Azure Active Directory objects
Automation to assess the state of your M365 tenant against CISA's baselines
Find exposed data in Azure with this public blob scanner
Tool to search secrets in various filetypes.
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
TheSnowWight / hackdocs
Forked from HackTricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
A fast enumeration tool for publicly exposed Azure Storage blobs.
Python tool for converting files and office documents to Markdown.
Xiaomi Home Integration for Home Assistant
A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.
Compiled Binaries for Ghostpack
dnSpyEx / dnSpy
Forked from dnSpy/dnSpyUnofficial revival of the well known .NET debugger and assembly editor, dnSpy
PowerSploit - A PowerShell Post-Exploitation Framework
A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.
A super-simple way to create todo lists.
Easily create and manipulate plain-text checklists
Python 3.5+ DNS asynchronous brute force utility
Build custom OSINT tools and APIs (Ping, Traceroute, Scans, Archives, DNS, Scrape, Whois, Metadata & built-in database for more info) with this python package
Small and highly portable detection tests based on MITRE's ATT&CK.
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
A collection of scripts for assessing Microsoft Azure security
Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.
SensePost's modified hostapd for wifi attacks.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF