l33tspeak password candidate generator

Check user access to SMB shares and print the share's top-level directory contents for manual investigation. Optionally, search files on the shares for strings of text.

Adversary Tactics - PowerShell Training

Cheat sheets for various projects.

Tools for fingerprinting and exploiting Amazon cloud infrastructures

Successor: https://github.com/fluxcd/flux2

A More or less Random Collection of Scripts for security Testing.

This repo contains a sample application based on a Garage Management System for Pitstop - a fictitious garage. The primary goal of this sample is to demonstrate several software-architecture concep…

Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

Improved decoder for Burp Suite

A command-line hex viewer

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

Modified template for the OSCP Exam and Labs. Used during my passing attempt

NSE script based on Vulners.com API

Everything you need to exploit overly permissive crossdomain.xml files

ActionScript Proof of Concept to perform cross-domain reads

A script that you can run in the background!

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

Demo app for Kubernetes Up and Running book

Example code and files from "Kubernetes: Up and Running"

Stuff about it-security that might be good to know

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

OSCP

An open-source post-exploitation framework for students, researchers and developers.

Code samples for the book "Terraform: Up & Running" by Yevgeniy Brikman