0x00-0x00

-CVE-2017-9805

Exploit script for Apache Struts2 REST Plugin XStream RCE (‎CVE-2017-9805)

TelePreter

Telegram-based PowerShell Runspace Host

0x00-0x00.github.io

jaeles

The Swiss Army knife for automated Web Application Testing

KrbRelayUp

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

PPLKiller

Tool to bypass LSA Protection (aka Protected Process Light)

pybackdoor

poc backdoor using python and threading

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

beef

The Browser Exploitation Framework Project

Blackbone

Windows memory hacking library

bypass-clm

PowerShell Constrained Language Mode Bypass

CVE-2021-21551

Exploit to SYSTEM for CVE-2021-21551

CVE-2021-21972

Proof of Concept Exploit for vCenter CVE-2021-21972

CVE-2021-36934

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

CVE-2021-40444

CVE-2021-40444 PoC

CVE-Exploits

PoCs for public CVE's I have been working on.

doomcaptcha

Captchas don't have to be boring

go-chromecast

cli for Google Chromecast, Home devices and Cast Groups

grocy

ERP beyond your fridge - grocy is a web-based self-hosted groceries & household management solution for your home

HTTP-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

jaeles-signatures

Default signature for Jaeles Scanner

juicy_2

juicypotato for win10 > 1803 & win server 2019

pe_to_shellcode

Converts PE into a shellcode

PrintNightmare

RemotePotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

sRDI

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

TranslationRO_PT-BR

Tradução de arquivos do Ragnarok para o PTBR server-side e client-side. A server-side and client-side translation for Ragnarok to Brazilian Portuguese

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

viper

Go configuration with fangs