ProfessionallyEvil / client-side-attacks-lab
Lab Environment for learning client-side attacks such as CSRF, Clickjacking, XSS, and CORS abuse.
☆20Updated 2 years ago
Alternatives and similar repositories for client-side-attacks-lab:
Users that are interested in client-side-attacks-lab are comparing it to the libraries listed below
- A simple program to query nmap xml files in the terminal.☆28Updated 4 years ago
- ☆33Updated 3 months ago
- A collection of OSCE preparation resources.☆24Updated 5 years ago
- Report and finding templates used by the Serpico reporting tool☆16Updated 6 years ago
- ☆16Updated 7 years ago
- This contains common OSCP local exploits and enumeration scripts☆11Updated 9 years ago
- LetMeOutOfYour.net Resources☆20Updated 4 years ago
- Script to parse multiple Nmap .gnmap exports into various plain-text formats for easy analysis.☆24Updated 10 years ago
- During pentesting I often miss screenshots of events for reports due to the quick pace of testing and a lack of foreknowledge about what …☆26Updated 5 years ago
- Privescker - make life easier by dumping all your common Windows enum, privesc and post exploitation scripts and tools on to the box in o…☆45Updated 3 years ago
- Data exfiltration utility for testing detection capabilities☆57Updated 3 years ago
- Small python script wrapper for automating hashcat commands☆38Updated 4 years ago
- Scripts for OSCE☆18Updated 6 years ago
- A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their asso…☆12Updated 4 years ago
- Noob Penetration tester☆11Updated 11 months ago
- automatic scan for hackthebox☆13Updated 5 years ago
- A parser to extract information from .nessus file format☆23Updated 4 years ago
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆12Updated 6 years ago
- Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets☆43Updated 2 years ago
- Kubernetes Scanner☆40Updated 3 years ago
- SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environme…☆47Updated 4 years ago
- Checklist for pentests, handy commands for to remembers, and a few tools to work on here and there. Far from complete!☆26Updated last year
- Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.☆57Updated 4 years ago
- Anonymize your hashcat formatted files for online cracking☆29Updated 5 months ago
- Tools for auditing WAFS☆19Updated 3 years ago
- Automation scripts in preparation for PWK/OSCP labs☆17Updated 3 years ago
- List of Bloodhound Python Custom Queries which I have found to be handy on engagements☆17Updated 5 years ago
- ☆15Updated 3 years ago
- This repo will contain slides and information from the Attacking Active Directory Hacking Series talks presented at SecKC.☆32Updated 9 months ago
- s3eker is an extensible way to find open S3 buckets.☆17Updated 4 years ago