A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Don't know what to focus on to become a Penetration Tester..? This is the BEST roadmap for becoming a modern penetration tester. Everything you need to know to land a paying job, categorized in 5 s…

Bash script for Subdomain Enumeration and Scanning

Code for my talks on the No Boilerplate channel

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …

Bitwarden client apps (web, browser extension, desktop, and cli).

Custom Query list for the Bloodhound GUI based off my cheatsheet

Orange Cyberdefense mindmaps

The swiss army knife of LSASS dumping

Impacket is a collection of Python classes for working with network protocols.

Mimikatz implementation in pure Python

A little tool to play with Windows security

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

A fast TCP/UDP tunnel over HTTP

Red Teaming & Pentesting checklists for various engagements

his list can be used by penetration testers when testing for SQL injection authentication bypass.A penetration tester can use it manually or through burp in order to automate the process.

This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.

PNPT Exam Preparation - TCM Security

A collection of awesome penetration testing resources, tools and other shiny things

List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point.

Web path scanner

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

This script is intended to automate your reconnaissance process in an organized fashion

The repo contains all the slide deck that was used during my presentation at various webinars, conferences, and meetups.

eJPTv2 Cheatsheet for the exam, with commands and tools shown in the course.

Notes I took while preparing for eJPT certification by INE Security (passed 19/20, fka eLearn Security)

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Burp Suite Certified Practitioner Exam Study