hackthebox

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Linux enumeration tool for pentesting and CTFs with verbosity levels

Writeups for HacktheBox 'boot2root' machines

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

My own OSCP guide

🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs

🔑 Hash type identifier (CLI & lib)

Hawkeye filesystem analysis tool

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

A random set of 5 machines for OSCP

A *nix Enumerator & Auto Privilege Escalation tool.

A living document for penetration testing and offensive security.

My OSCP journey

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries

Python script to decrypt passwords stored by mRemoteNG

Writeups for vulnerable machines.

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

Cheat sheets for Hack(ing) The Box(es)

Writeups for all the HTB machines I have done

A tool for username enumeration, using text, files, or websites

Privescker - make life easier by dumping all your common Windows enum, privesc and post exploitation scripts and tools on to the box in one go.

Automate writeup for vulnerable machines.

[180+ scripts] There are a few genuine gems in there. And a lot of spaghetti code. Most of these scripts were for solving CTF's. If you googles something for a CTF and landed here look at the scripts they're all fairly malleable. Sorry for the shitty naming conventions (not really). If you are a recruiter stop. I wont be able to rewrite half this shit in a formal interview ¯\_(ツ)_/¯

Cybersecurity stuff for both the blue team and the red team, mostly red though.