Active Directory and Internal Pentest Cheatsheets

Hardware/IOT Pentesting Wiki

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Passive service locator, a python sniffer that identifies servers, clients, names and much more

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

A fully featured Windows backdoor that uses Gmail as a C&C server

The Hunting ELK

Analyze HTTP requests to minimize risks of HTTP Desync attacks (precursor for HTTP request smuggling/splitting).

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.