frizb

Windows-Privilege-Escalation. Windows Privilege Escalation Techniques and Scripts

Hashcat-Cheatsheet. Hashcat Cheatsheet for OSCP

Vanquish. Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

Hydra-Cheatsheet. Hydra Password Cracking Cheetsheet

MSF-Venom-Cheatsheet. Single Page Cheatsheet for common MSF Venom One Liners

Bypassing-Web-Application-Firewalls. A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers

Linux-Privilege-Escalation. Tips and Tricks for Linux Priv Escalation

PasswordDecrypts. Handy Stored Password Decryption Techniques

FirmwareReverseEngineering. Notes and tools from my experiences reverse engineering firmware

HackingWithCurl. A list of examples and references of hacking with Bash and the Curl command

WordListGen. Super Simple Python Word List Generator for Fuzzing and Brute Forcing in Python

BloodHoundCustomQueries. List of Bloodhound Python Custom Queries which I have found to be handy on engagements

WindowsShells. Information Repository on Various Methods of getting shell access into a Windows machine

Powershell-Cheatsheet. Hand list of Powershell commands frequently used during penetration tests

Active-Directory-Fun. Notes on Active Directory analysis and exploitation

awesome-pentest-cheat-sheets. Collection of the cheat sheets useful for pentesting

SQLMapExamples. A list of sample SQL Map Injection Commands

Wordlust. Wordlust is a Password Base Wordlist for Hashcat Mutator Rules

WindowsMeterpreterSessionDied. Some exploits are unstable in nature and only allow for a very short shell command window. These scripts can help extend your remote shell session by quickly spawning a new reverse shell.

MouseJacking. MouseJacking on Kali Linux with CrazyRadio PA

Directory-Traversal-Toolbox. A few handy scripts for pulling important files off remote machines using a directory traversal or local file include vulnerability.

OSCP. Collection of things made during my OSCP journey

OpenSSL-Enc-By-Example. Examples of how to use openssl-enc for symmetric cipher encryption and decryption

Python_DES_Decryptor. A simple python script for decrypting DES that has been generated by a .NET application

DirtyStringInjectOneLiner. A one liner dirty string with many common injection techniques

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

CTF-Walkthroughs. A collection of CTF Walkthroughs

Windows-Post-Exploitation. Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!

SSH_Sample_Keys. A collection of Public and Private SSH keys for reference purposes

SILENTTRINITY. A post-exploitation agent powered by Python, IronPython, C#/.NET

SiteMapMaker. Creates an HTML site map based on a specified base URL and a folder path. Handy for exploring for hidden content in Burp Suite if you have the application’s source code.

CLISerialFuzzer. Serial Connection CLI Command Jail Break Fuzzer

KaliTroubleshooting. Handy Tricks for Troubleshooting Kali

MagicPing. Python 2.7 raw socket ICMP ping to send a embedded message or a magic ping to an endpoint

XOR_MOAR. Simple Python Utilities Developed During CTF Events For XORing Data

c2. C2

SpookFlare. Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

VR-Industrial-Control-Room. Virtual Reality experience that transports people into an industrial control room environment.