Tools and Scripts used for Pentesting like HackTheBox, tryhackme, and more (only white-hat stuff ofc :p)
Roman Hergenreder
2338077bd6
python webserver routes
|
3 months ago | |
|---|---|---|
| autorecon_config | 7 months ago | |
| win | 3 months ago | |
| .gitignore | 4 months ago | |
| LinEnum.sh | 1 year ago | |
| README.md | 3 months ago | |
| __init__.py | 3 months ago | |
| autorecon.py | 7 months ago | |
| chisel | 3 months ago | |
| chisel64 | 3 months ago | |
| crack_hash.py | 3 months ago | |
| deepce.sh | 4 months ago | |
| fileserver.py | 3 months ago | |
| first_scan.sh | 5 months ago | |
| genRevShell.py | 4 months ago | |
| git-dumper.py | 7 months ago | |
| gobuster.sh | 1 year ago | |
| jsp-webshell.jsp | 3 months ago | |
| linpeas.sh | 4 months ago | |
| linux-exploit-suggester.sh | 3 months ago | |
| lse.sh | 1 year ago | |
| p0wny-shell.php | 1 year ago | |
| padBuster.pl | 9 months ago | |
| php-reverse-shell.php | 1 year ago | |
| pingscan.py | 3 months ago | |
| portscan.py | 3 months ago | |
| pspy64 | 1 year ago | |
| requirements.txt | 7 months ago | |
| sql.php | 4 months ago | |
| ssh-check-username.py | 1 year ago | |
| startHttpServer.sh | 3 months ago | |
| subdomainFuzz.sh | 3 months ago | |
| unix-privesc-check.sh | 1 year ago | |
| upload_file.py | 7 months ago | |
| uptux.py | 1 year ago | |
| util.py | 4 months ago | |
| web_service_finder.py | 3 months ago | |
| xss_handler.py | 3 months ago |
README.md
HackingScripts
This repository contains self-made and common scripts for information gathering, enumeration and more.
Enumeration: Initial Scans
- first_scan.sh: Performs initial nmap scan
- gobuster.sh: Performs gobuster dir scan with raft-large-words-lowercase.txt
- ssh-check-username.py: Check if user enumeration works for ssh
- git-dumper.py
- autorecon.py
- subdomainFuzz.sh: Fuzzes subdomains for a given domain
Enumeration: Privilege Escalation & Pivoting
- LinEnum.sh
- linpeas.sh
- lse.sh
- unix-privesc-check.sh
- uptux.py
- pspy64
- portscan.py: small python script, which scans open TCP ports natively with multithread support. Can be deployed on victim machines to scan the intranet.
- pingscan.py: small python script, which can detect internal hosts via ping probes natively. Can be deployed on victim machines to scan the intranet.
- deepce.sh: Docker Privilege Escalation (e.g. exposed socket)
Reverse Shell: Payloads
- genRevShell.py: Generates a reverse shell command (e.g. netcat, python, ...)
- php-reverse-shell.php
- p0wny-shell.php
Miscellaneous
- upload_file.py: Starts a local tcp server, for netcat usage
- xss_handler.py: Starts a local http server and generates xss payload to steal cookies
- padBuster.pl
- sql.php: Execute sql queries passed via GET/POST
- util.py: Collection of some small functions
- fileserver.py: Create a temporary http server serving in-memory files
Windows
- nc.exe/nc64.exe: netcat standalone binary
- mimikatz.exe
- plink.exe: command line PuTTY client for port forwarding
- powercat.ps1
- winPEAS.bat
- PowerView.ps1
- SharpHound.exe: BloodHound Ingestor
- windows-exploit-suggester.py
- aspx-reverse-shell.aspx