PEASS-ng
rawsec-cybersecurity-inventory
| PEASS-ng | rawsec-cybersecurity-inventory | |
|---|---|---|
| 90 | 6 | |
| 14,899 | 238 | |
| 1.4% | - | |
| 8.3 | 9.5 | |
| 15 days ago | 4 days ago | |
| C# | JavaScript | |
| GNU General Public License v3.0 or later | Mozilla Public License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
PEASS-ng
-
Great enumeration scripts?
Once on a system, something like Linpeas or Winpeas would be useful: https://github.com/carlospolop/PEASS-ng
-
HackersToolKit.co - One-Stop Shop for Tool Commands for CTFs, bug bounty, and Penetration Testing
Reject internet, embrace man. TBH it is not usefull at all, it is just in manual or embedded in kali, like basic webshells for example. It is cool to do such thing as a little free time project to learn about hosting and developing a website, but usefulnes for broader audience is minimal I think. For everyday use https://book.hacktricks.xyz are the best in my opinion.
-
Allowed tools for OSCP
I'm taking my OSCP exam next Wednesday and was just wondering on what tools are actually prohibited and which are not. I'm specifically referring to linpeas, winpeas, seatbelt. I often times run these tools when I've exausted my enumeration methods for a quick find. Are these tools allowed on the AD set and the individual machines?
-
Qualified to write a technical book ?
Seems like a cart before horse situation. Why not just release the cheat sheet you have now and see how it does? I like Carlos Polop's approach with HackTricks -- https://book.hacktricks.xyz/ -- he offers previews of new content to his patrons.
-
For cycle inside a list
Hi I don't understand the self.files attribute in this code: https://github.com/carlospolop/PEASS-ng/blob/master/linPEAS/builder/src/fileRecord.py
- LinPEAS
-
What are the alternative tools for wmic on cmd?
I'd recommend poking around at github and see what you find. A good starting point is WinPEAS if you're looking for automation. Seatbelt might also be helpful
- What are the alternatives for wmic on cmd?
- Need an ex OSCP candidate to share their experiences.
-
Hack The Box - Vessel [Hard] - Walkthrough
Using linpeas I found some useful information over the user steven
rawsec-cybersecurity-inventory
- Really isn't there a central hacking wiki?
-
lateralus - terminal based phishing campaign tool
You should MR/PR to add it here: https://inventory.raw.pm/
-
List of Open Source Security Tools
Search engine: https://inventory.raw.pm/
-
Search-That-Hash - Searches Hash Lookup APIs before automatically cracking in HashCat. Can reduce an 8 hour crack down to a couple of seconds.
https://inventory.raw.pm/ --> JWT
-
What should I learn as a beginner trying to get into cyber security?
If you are looking for cybersecurity tools & resources there is Rawsec's CyberSecurity Inventory: the resources page will help you find challenges platforms, information websites & blogs, wikis, trainings, courses, tutorials, etc.
-
Are there any crowd-sourced OSINT projects that need help?
Maybe this : https://github.com/noraj/rawsec-cybersecurity-inventory
What are some alternatives?
lynis - Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Search-That-Hash - 🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡
warp-plus-cloudflare - Script for getting unlimited GB on Warp+ ( https://1.1.1.1/ ) [GET https://api.github.com/repos/ALIILAPRO/warp-plus-cloudflare: 403 - Repository access blocked]
MrKaplan - MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.
pimpmykali - Kali Linux Fixes for Newly Imported VM's
Lucifer - A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life
CCStopper - [Archived] Stops Adobe's pesky background apps and more 😉
awesome-security-hardening - A collection of awesome security hardening guides, tools and other resources
PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF
pyWhat - 🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
GTFONow - Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
lateralus - Lateralus is terminal based phishing campaign tool