My Notes about Penetration Testing

A PowerShell tool that takes strong inspiration from CrackMapExec.

A collection of CTF write-ups, pentesting topics, guides and notes. Notes compiled from multiple sources and my own lab research. Topics also support OSCP, Active Directory, CRTE, eJPT and eCPPT.

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist Penetration Testers and Red Teams with lateral movement within Active Directory environments

Nikto web server scanner

DNS Enumeration Script

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

SMBMap is a handy SMB enumeration tool

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Crack Everything for CrackMapExec version 6

A curated list of awesome OSCP resources

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

sslscan tests SSL/TLS enabled services to discover supported cipher suites

Linux enumeration tool for pentesting and CTFs with verbosity levels

ODAT: Oracle Database Attacking Tool

A swiss army knife for pentesting networks

Privilege Escalation Enumeration Script for Windows

Various *nix tools built as statically-linked binaries

notes and ramblings from my OSCP/PenTesting Studies

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts

ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is is best utilized using a set of known c…

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

30 Day Vanilla JS Challenge