A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
86,076 visible repositories in the index
1–16 of 16 · Most stars
JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.
TranslatedA knowledge base for red teaming and offensive security.
- command-and-control
- execution
- exploit
- initial-access
Privilege Escalation Project - Windows / Linux / Mac
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
BloodyAD is an Active Directory Privilege Escalation Framework
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
IAM Least Privilege Policy Generator
linuxprivchecker.py -- a Linux Privilege Escalation Check Script
- oscp
- oscp-tools
- htb
- linux-privilege-escalation
A basic user tool to execute simple docker containers in batch or interactive systems without root privileges.
- docker
- containers
- batch
- user
Gives you one-liners that aids in penetration testing operations, privilege escalation and more
- hacking
- hacking-tool
- web-delivery
- metasploit
ODAT: Oracle Database Attacking Tool
- oracle-database
- pentest-tool
- pentest
- privilege-escalation
Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
- cloud-native
- kubernetes
- container
- cloud-native-security
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner