hackthebox

⬆️ ☠️ Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, polkit, docker socket

Linux enumeration tool for pentesting and CTFs with verbosity levels

Writeups for HacktheBox 'boot2root' machines

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

My own OSCP guide

CTF Cheatsheet

🔭 Lightweight URL fuzzer and spider: Discover a web server's undisclosed files, directories and VHOSTs

Hawkeye filesystem analysis tool

🔑 Hash type identifier (CLI & lib)

A random set of 5 machines for OSCP

A *nix Enumerator & Auto Privilege Escalation tool.

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries

Python script to decrypt passwords stored by mRemoteNG

My OSCP journey

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Cheat sheets for Hack(ing) The Box(es)

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

Writeups for vulnerable machines.

Write-ups for CTF challenges.

Writeups for all the HTB machines I have done

Automate writeup for vulnerable machines.

Privescker - make life easier by dumping all your common Windows enum, privesc and post exploitation scripts and tools on to the box in one go.

[180+ scripts] There are a few genuine gems in there. And a lot of spaghetti code. Most of these scripts were for solving CTF's. If you googles something for a CTF and landed here look at the scripts they're all fairly malleable. Sorry for the shitty naming conventions (not really). If you are a recruiter stop. I wont be able to rewrite half this shit in a formal interview ¯\_(ツ)_/¯

Exploits developed by me.