Amr-Hamza

through_the_wire

CVE-2022-26134 Proof of Concept

CVE-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

EoPLoadDriver

Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)

SeLoadDriverPrivilege

Windows Privilege Escalation

Bug-Bounty-Methodology

pypykatz

Mimikatz implementation in pure Python

WindowsDowndate

A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities

symboliclink-testing-tools

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Thick-Client-Pentest-Checklist

A OWASP Based Checklist With 80+ Test Cases

oracle_forms

Testing tools for Oracle Forms

SeManageVolumeExploit

CVE-2024-38063

poc for CVE-2024-38063 (RCE in tcpip.sys)

CVE-2024-38063-poc

Note: I am not responsible for any bad act. This is written by Chirag Artani to demonstrate the vulnerability.

FullPowers

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

spose

Squid Pivoting Open Port Scanner

EventViewer-UACBypass

🍊 Orange Tsai EventViewer RCE

AMSI_VEH

A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, function hooking or Import Address Table (IAT) modification.

inspec

InSpec: Auditing and Testing Framework

gofuzz

Frida-Script-Runner

Frida Script Runner is a versatile web-based tool designed for Android and iOS penetration testing purposes.

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

CVE-2023-2640-CVE-2023-32629

GameOver(lay) Ubuntu Privilege Escalation

CVE-2023-35001

Pwn2Own Vancouver 2023 Ubuntu LPE exploit

CVE-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

Pwning_Blue_From_HTB_Without_Metasploit

Windows 7 Professional 7601 Service Pack 1 is vulnerable to eternalblue exploit and while exploiting this myself i ran into a number of issues . So , now i will show you how to exploit it without using metasploit .

KrbRelay

Framework for Kerberos relaying

UsernameGenerator

Simple username generator based on a list of name and surname