hexing19 Goto Github PK

1195777-chrome0day

19

adversary_emulation_library

一个开放的对手模拟计划库，旨在使组织能够根据现实世界的TTP测试他们的防御。

aresskit

Next Generation Remote Administration Tool (RAT)

arjun

HTTP parameter discovery suite.

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

att-ck-json

Cyber Threat Intelligence Repository expressed in STIX 2.0

auto-elevate

Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token Impersonation

byob

BYOB (Build Your Own Botnet)

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

canisrufus

A stealthy Python based Windows backdoor that uses Github as a command and control server

catchyou

FUD win32 msfvenom payload generator

cloud-native-security-book

《云原生安全：攻防实践与体系构建》资料仓库

cms-hunter

CMS漏洞测试用例集合

cnvd-2020-10487-tomcat-ajp-lfi-scanner

CNVD-2020-10487/CVE-2020-1938,批量扫描工具

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

confuserex-mod-by-bed

Beds Protector | Best free obfuscation out right now

creds

Some usefull Scripts and Executables for Pentest & Forensics

cronos-rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

cve-2020-1054

LPE for CVE-2020-1054 targeting Windows 7 x64

cve-2020-11651

cve-2020-1350

Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

cve-2021-1675

C# and Impacket implementation of CVE-2021-1675/PrintNightmare

cve-2021-22986-ssrf2rce

F5 BIG-IP/BIG-IQ iControl Rest API SSRF to RCE

cve-2021-24086

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-3156

PoC for CVE-2021-3156 (sudo heap overflow)

dbc2

DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.

devcon-installer

Quickly download and install DevCon without downloading the entire Windows Driver Kit

dllsideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading