synacktiv Goto Github PK

amsi-bypass

Lists of AMSI triggers (VBA, JScript / VBScript)

arlo

Arlo file format helper

astrolock

A purposely vulnerable application in order to demonstrate PHP payload smuggling techniques for PNG files.

bbs

bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of proxies based on the request's target. Routing can be configured with a PAC script (if built with PAC support), or through a JSON file.

bfs_challenge_2019

Solution for BFS Ekoparty challenge 2019

bhyve

bip

burp-jq

Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.

cachedata_decrypt

A simple Toolkit to BF and decrypt Windows EntraId CacheData

canon-mf644

canon-tools

Tools used for decrypting Canon printers firmwares

captainhook

ctf-write-ups

Some CTF Write-ups

cve-2019-8942

WordPress crop-image exploitation

cve-2020-27950

CVE-2020-27950 exploit

cve-2020-9289

Decrypt reversible secrets encrypted using the default hardcoded key related to CVE-2020-9289 on FortiAnalyzer/FortiManager (the only difference with CVE-2019-6693 is the encryption routine).

cve-2021-1782

cve-2021-27246_pwn2own2020

cve-2021-3492

PoC for CVE-2021-3492 used at Pwn2Own 2021

cve-2021-40539

Exploitation code for CVE-2021-40539

cve-2023-35001

Pwn2Own Vancouver 2023 Ubuntu LPE exploit

depfuzzer

dissect.esedb

A Dissect module implementing a parser for Microsofts Extensible Storage Engine Database (ESEDB), used for example in Active Directory, Exchange and Windows Update.

dlhell

Local & remote Windows DLL Proxying

dotniet

eipp

Entra ID Password Protection Banned Password Lists

eos

Enemies Of Symfony - Debug mode Symfony looter

exim-cve-2018-6789

PoC materials to exploit CVE-2018-6789

exim-cve-2019-15846

PoC materials to exploit CVE-2019-15846

forensic-msvpn

This repository contains Velociraptor artifact and Chainsaw rules to help detect Microsoft Remote Access VPN activity