chertogun Goto Github PK

ctf-tools

Some setup scripts for security research tools.

ctf-write-ups

CTF write-ups repository

ctp-osce

Scripts I used during CTP

cuckoo-sandbox

Notes relating to Cuckoo Sandbox Installation

custom-wordlists

cve-2017-0785

Blueborne CVE-2017-0785 Android information leak vulnerability

cve-2017-10271

Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)

cve-2017-11882

CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

cve-2018-0802

PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)

cve-2018-0802_cve-2017-11882

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2019-11708

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

cve-2019-1215

cve-2020-0624

win32k use-after-free poc

cve-2020-0683

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-1206-poc

CVE-2020-1206 Uninitialized Kernel Memory Read POC

cve-2020-1362

writeup of CVE-2020-1362

cve-2020-27301-hostapd

cve-2021-21315-poc

CVE 2021-21315 PoC

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2022-21449-tls-poc

CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server

cve-2022-21971

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

cve-2022-21974

PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"

cve-2022-28281

PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.

cyberchef-recipes

A list of cyber-chef recipes

cybermonitor-apt_cybercriminal_campagin_collections

cyberprofdevelopmentcovidresources

An awesome list of FREE resources for training, conferences, speaking, labs, reading, etc that are free all the time or during COVID-19 that cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock.

cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups