Vulmon - Vulnerability Intelligence Search EngineSearch anything related to vulnerabilities on Vulmon, from products to vulnerability types. Start your journey to free vulnerability intelligence. Don't you know what to search? Selected search queries to get you started fast
HackTricks - HackTricks
Translations ▾ Afrikaans Chinese English French German Greek Hindi Italian Japanese Korean Polish Portuguese Serbian Spanish Swahili Turkish Ukrainian HackTricks Hacktricks logos & motion design by @ppieranacho. Run HackTricks Locally # Download latest version of hacktricks git clone https://github.com/HackTricks-wiki/hacktricks # Select the language you want to use export LANG="master" # Leave ma
Practical guide to NTLM Relaying in 2017 (A.K.A getting a foothold in under 5 minutes) // byt3bl33d3r // /dev/random > blog.py
Practical guide to NTLM Relaying in 2017 (A.K.A getting a foothold in under 5 minutes) // under Active Directory This blog post is mainly aimed to be a very 'cut & dry' practical guide to help clear up any confusion regarding NTLM relaying. Talking to pentesters I've noticed that there seems to be a lot of general confusion regarding what you can do with those pesky hashes you get with Responder.
Windows Notes / Cheatsheet
Windows CheatsheetActive DirectoryExploitationPriv EscPost ExploitFile TransferLateral Movement A place for me to store my notes/tricks for Windows Based Systems. Note: These notes are heavily based off other articles, cheat sheets and guides etc. I just wanted a central place to store the best ones. The best Active Directory resource out there -> https://zer1t0.gitlab.io/posts/attacking_ad/ <a hr
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Understanding and Exploiting Web-based LDAP
GitHub - ARPSyndicate/xlocate: the ultimate exploits/references finder
GitHub - HackTricks-wiki/hacktricks: Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
GitHub - lijiejie/GitHack: A `.git` folder disclosure exploit
GitHub - Yara-Rules/rules: Repository of yara rules
RedTeam Resources
GitHub - averagesecurityguy/scripts: Scripts I use during pentest engagements.
💀 Sploitus | Exploits & Tools Search Engine
GitHub - secfigo/Awesome-Fuzzing: A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause an
GitHub - gquere/pwn_jenkins: Notes about attacking Jenkins servers
GitHub - s0md3v/XSStrike: Most advanced XSS scanner.