offensive-security · GitHub Topics

#速查表 cheatsheets#One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

翻译 - 所有默认凭据的一个地方，可以帮助蓝色/红色团队成员活动查找具有默认密码password️的设备

Cybersecurity default-password pentesting Bug Bounty pentest credentials-gathering cheatsheet blueteam offensive-security

Python5.79 k

3 个月前

RedTeaming-Tactics-and-Techniques

@mantvydasb

#夺旗赛 (CTF) 和网络安全资源#Red Teaming Tactics and Techniques

翻译 - 红队战术与技巧

redteam pentesting redteaming redteam-infrastructure offensive-security oscp

PowerShell4.1 k

4 个月前

Villain

@t3l3machus

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them ...

Open Source pentest pentesting readteaming redteam-tools redteam Cybersecurity offensive-security c2 Hacking

Python3.85 k

2 个月前

OSCP-Exam-Report-Template-Markdown

@noraj

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

翻译 - ：orange_book：Markdown中的OSCP考试报告模板

oscp offensive-security report oscp-prep reporting-tool pandoc markdown-template Markdown markdown-to-pdf exam

Ruby3.58 k

21 天前

black-hat-rust

@skerkour

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Rust Security pentest pentesting offensive-security red-team audit beacon c2 Bug Bounty

Rust3.33 k

5 个月前

ligolo-ng

@nicocha30

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

redteam tunneling Go post-exploitation offensive-security pentest-tool pentesting pivoting

Go2.96 k

13 天前

BigBountyRecon

@Viralmaniar

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

翻译 - BigBountyRecon工具利用58种不同的技术，使用了各种Google工具和开源工具，以加快对目标组织的初步侦查过程。

OSINT Reconnaissance reconnaissance Cybersecurity offensive-security pentesting pentest-tool Bug Bounty bugbounty-tool bugbountytips

C#1.27 k

4 年前

BlackMamba

@loseys

C2/post-exploitation framework

翻译 - C2 /开发后框架

pyqt5 Python spyware post-exploitation pentest pentest-tool offensive-security red-team Security command-and-control

Python1.04 k

3 年前

conti-pentester-guide-leak

@ForbiddenProgrammer

Leaked pentesting manuals given to Conti ransomware crooks

翻译 - 泄露给 Conti 勒索软件骗子的渗透测试手册

Cybersecurity pentesting offensive-security redteaming cobalt-strike ransomware ransomware-detection mitigation IoC (Disambiguation)

Batchfile908

3 年前

RustRedOps

@joaoviictorti

🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.

Malware redteam Rust Security Windows Hacking offensive-security malware-development

Rust828

7 个月前

ThreatHunting-Keywords

@mthcht

#Awesome#Awesome list of keywords and artifacts for Threat Hunting sessions

Awesome Lists blueteam detection-engineering endpoint-security iocs offensive-scripts offensive-security redteam siem soc

HTML486

14 天前

php-reverse-shell

@ivan-sincek

PHP shells that work on Linux OS, macOS, and Windows OS.

翻译 - PHP反向Shell脚本。适用于Linux OS，macOS和Windows OS。

PHP reverse-tcp reverse-shell Network ethical-hacking Security offensive-security Windows Linux macOS

PHP467

1 年前

penetration-testing-cheat-sheet

@ivan-sincek

Work in progress...

penetration-testing cheat-sheet ethical-hacking Security offensive-security

PHP461

1 年前

rmiscout

Bishop Fox@BishopFox

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

翻译 - RMIScout使用单词列表和蛮力策略来枚举Java RMI函数并利用RMI参数解组漏洞

Java java-rmi java-deserialization Security offensive-security javassist scanner

Java423

2 年前

agartha

@volkandindar

A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations, while also converting HTTP requests to JavaScript for enhanced...

penetration-testing pentesting Cybersecurity burp-extensions offensive-security Hacking hacking-tool application-security appsec offsec

Python346

4 个月前

android-penetration-testing-cheat-sheet

@ivan-sincek

#安卓#Work in progress...

Android android-penetration-testing ethical-hacking offensive-security penetration-testing Security Bug Bounty frida objection red-team-engagement

JavaScript328

9 个月前