A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-
Updated
Mar 12, 2022 - Python
{{ message }}
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.
E-mails, subdomains and names Harvester - OSINT
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
List of Awesome Red Teaming Resources
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
Red Teaming Tactics and Techniques
cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources
Automation for internal Windows Penetrationtest / AD-Security
Redteam operation platform with webui 图形化红队行动辅助平台
Free copy of The Cyber Plumber's Handbook
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.
Collection of quality safety articles. Awesome articles.
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.
Venom - A Multi-hop Proxy for Penetration Testers
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
Snoop — инструмент разведки на основе открытых данных (OSINT world)
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++.
generate CobaltStrike's cross-platform payload
Add a description, image, and links to the redteam topic page so that developers can more easily learn about it.
To associate your repository with the redteam topic, visit your repo's landing page and select "manage topics."
Current implementation of
proclistplugin useswin32_ps_list_procs()php function on Windows host.Therefore, linux implementation is a simple
system("ps -a"), which is OPSEC unsafe, an would probably trigger EDR alerts.A better implementation should avoid relying on system command execution.