Alexandre ZANNI

OSCP-Exam-Report-Template-Markdown. :orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

haiti. :key: Hash type identifier (CLI & lib)

flask-session-cookie-manager. :cookie: Flask Session Cookie Decoder/Encoder

rawsec-cybersecurity-inventory. An inventory of tools and resources about CyberSecurity that aims to help people to find everything related to CyberSecurity.

BB-legal-FR. Quelques conseils autour des obligations légales, fiscales et juridique pour la pratique du Bug Bounty en France

ctf-party. :triangular_flag_on_post: A CLI tool & library to enhance and speed up script/exploit writing with string conversion/manipulation.

Umbraco-RCE. Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

ANDRAX-Mobile-Pentest-1. ANDRAX Advanced Penetration Testing Platform for Android Smartphones

pass-station. CLI & library to search for default credentials among thousands of Products / Vendors

firefox-extension-arch-search. A set of Web Extensions that adds ArchLinux (bug tracker, forum, packages, wiki, AUR) as a search engine to the Firefox browser.

the-hacking-trove. The hacker technical cheat sheet

miniss. Displays a list of open listening sockets. It is a minimal alternative to ss or netstat.

mkdocs-windmill-dark. Outstanding mkdocs theme with a focus on navigation and usability

refind-theme-regular. Shell

AWAE-OSWE.

vbsmin. VBScript minifier

tryhackme-writeups. Write-Ups for TryHackMe

unisec. Unicode Security Toolkit

DCDetector. Spot all domain controllers in a Microsoft Active Directory environment. Find computer name, FQDN, and IP address(es) of all DCs.

ADAssault. Dominate the Active Directory game. An Active Directory environments pentest tool complementary to existing ones like NetExec.

Bludit-auth-BF-bypass. Bludit <= 3.9.2 - Authentication Bruteforce Mitigation Bypass

PixelChart. Map binary data into a beautiful chart

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Pentest-collab-convert. Collection of scripts used to convert stuff from one penetration testing collaborative platform to another and facilitate the migration of solution

cybertopia-marp. 🎨 A dark theme for Marp / Marpit slides ecosystem with a custom highlight.js theme.

rabid. :cookie: A CLI tool and library allowing to simply decode all kind of BigIP cookies.

tls-map. CLI & library for TLS cipher suites manipulation

ctfd-theme-sigsegv2. SigSegv2 CTFd theme

Atmail-exploit-toolchain. AtMail Email Server Appliance 6.4 - Exploit toolchain (XSS > CSRF > RCE)

vrt-cli. A simple tool to visualize VRT (Vulnerability Rating Taxonomy) from the CLI.

hacktricks. Python

aspisec. Vacuuming out the remnants of offensive tools. AspiSec is responsible for removing the traces and confidential information left by offensive security tools on an auditor's computer in various cache and log files.

OpenEMR-RCE. OpenEMR <= 5.0.1 - (Authenticated) Remote Code Execution

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

fuelcms-rce. Fuel CMS 1.4 - Remote Code Execution

kh2hc. Convert OpenSSH known_hosts file hashed with HashKnownHosts to hashes crackable by Hashcat.

spaceship-current-netns. Current network namespace for Spaceship prompt

security.txt_stats. :bar_chart: Scripts used for the security.txt statistic study

cybertopia-highlightjs. 🎨 Dark theme (and several variants) for highlight.js

ffuf-scripts. Scripts to help with different ffuf tasks and workflows

XSS-classification-model. :speech_balloon: XSS classification model - Types of Cross-Site Scripting

tlrc-dracula. Dracula theme for tlrc

DefaultCreds-cheat-sheet. One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

OSCP-Prep. A list of the resources I use as I get ready for the exam

The-Hacker-Recipes. This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, intelligence gathering, physical intrusion, phishing, mobile apps, iot, social engineering, etc.

AD_Miner. AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

huxdemp. A better hexdump

Pinkerton. 🕵️ Pinkerton is an JavaScript file crawler and secret finder tool developed in Python

breads. Breaking Active Directory Security with 🍞

mssqlrelay. Tool for MSSQL relay audit and abuse