th3xace Goto Github PK

bluffy

Convert shellcode into :sparkles: different :sparkles: formats!

bof-regsave

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

bruteshark

Network Analysis Tool

certificationmaterials

A collection of materials related to my certification videos

certipy

Tool for Active Directory Certificate Services enumeration and abuse

cheatsheet-god

Penetration Testing Biggest Reference Bank - OSCP / PTP & PTX Cheatsheet

checklists

Pentesting checklists for various engagements

chisel-strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

ciphey

Automatically decode encryptions without a key, decode encodings, and crack hashes

cloud-security-research

Cloud-related research releases from the Rhino Security Labs team.

cloud-service-enum

clrvoyance

Managed assembly shellcode generation

cms-hunter

CMS漏洞测试用例集合

cobaltstrike_redteam_cheatsheet

Useful Cobalt Strike techniques learned from engagements

config_killer

Script written in bash to identify and dump services config files

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

crossc2

generate CobaltStrike's cross-platform payload

ctf

ctf-difficulty

This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.

ctf-pocket-sand

little programs I need and end up writing over and over for use in CTFs and such

cve-2019-2725

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2021-1675

C# and Impacket implementation of CVE-2021-1675/PrintNightmare

cve-2021-1675-lpe

Local Privilege Escalation Edition for CVE-2021-1675

cve-2022-1388_poc

F5 BIG-IP RCE exploitation (CVE-2022-1388)

debian-ssh

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

deepbluecli

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️