Open Red Team Bag of Tricks - Red Teaming and Pentesting cheat sheet and trick book
☆97Jan 25, 2017Updated 9 years ago
Alternatives and similar repositories for ortbot
Users that are interested in ortbot are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts that I've written that others may find useful☆14Aug 17, 2022Updated 4 years ago
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- Issues to consider when planning a red team exercise.☆614Aug 23, 2017Updated 9 years ago
- 便捷地使用PostgreSQL自定义函数来执行系统命令，适用于数据库管理员知道postgres密码却不知道ssh或RDP密码的时候在服务器执行系统命令。☆55Mar 10, 2020Updated 6 years ago
- A set of compiled application restriction bypasses☆30Mar 15, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Tricks for penetration testing☆590Apr 22, 2026Updated 6 months ago
- Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.☆57Dec 18, 2017Updated 8 years ago
- ☆72Nov 20, 2017Updated 8 years ago
- ☆13Aug 18, 2016Updated 10 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆163Apr 11, 2017Updated 9 years ago
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆50Feb 27, 2019Updated 7 years ago
- ☆21Nov 13, 2019Updated 6 years ago
- Miscellaneous C-Sharp projects for red team activities☆22Aug 12, 2022Updated 4 years ago
- This repository contains some details about abusing outlook.☆26Aug 17, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Red Team Tips as posted by @vysecurity on Twitter☆1,115Apr 26, 2020Updated 6 years ago
- The repository for Building visualisation platforms for OSINT data using open source solutions☆29Aug 21, 2018Updated 8 years ago
- An example of high-QPS requesting Burp Intruder style on AWS Lambda via self-invocation.☆22Nov 15, 2018Updated 7 years ago
- A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system☆205May 11, 2023Updated 3 years ago
- A Powershell implementation of PrivExchange designed to run under the current user's context☆125Jan 31, 2019Updated 7 years ago
- A simple bash script that uses smbclient to test access to Windows file shares in automated fashion.☆19Jul 9, 2015Updated 11 years ago
- A dsniff project using bro☆11Jan 25, 2016Updated 10 years ago
- Certificate Export Utility☆26May 1, 2020Updated 6 years ago
- Monitor adapter, Fake DNS, Tunnel, and DHCP combined into one Windows Service☆12Apr 19, 2015Updated 11 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CobaltStrike External C2 for Websockets☆195Jul 16, 2019Updated 7 years ago
- ☆16Oct 23, 2015Updated 11 years ago
- The project is based on Ben Clark's book: Red Team Field Manual.☆58Jan 25, 2017Updated 9 years ago
- A bash script that fetches and maintains thousands of DNS resolvers☆64Aug 24, 2020Updated 6 years ago
- Self contained htaccess shells and attacks☆16May 18, 2018Updated 8 years ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆14Dec 30, 2018Updated 7 years ago
- The documents☆56Nov 2, 2017Updated 9 years ago
- Simple multi threaded tool to extract domain related data from commoncrawl.org☆30Jul 17, 2018Updated 8 years ago
- apache solr 5.x - 8.2.0 rce (with config api)☆11Oct 31, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Overview about existing tools that can be useful for AWS auditing purposes.☆15Sep 25, 2017Updated 9 years ago
- 配合reGeorg使用的内网扫描工具☆60Oct 27, 2016Updated 10 years ago
- Axis2 RPC Shell☆15Sep 10, 2015Updated 11 years ago
- Reverser - A Quick Reverse Connection Deployment Script☆12Jun 22, 2012Updated 14 years ago
- Burp plugin that clusters responses to show an overview of received responses☆14Jun 7, 2019Updated 7 years ago
- RedSnarf is a pen-testing / red-teaming tool for Windows environments☆1,220Sep 14, 2020Updated 6 years ago
- MS15-076 Privilege Escalation☆16Aug 11, 2015Updated 11 years ago