S1lkys

Silky's repositories

SharpKiller

Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8

Language:C#346 3 2

shellphishSS

Phishing Tool for Instagram, Facebook, Twitter, Snapchat, Github, Yahoo, Protonmail, Google, Spotify, Netflix, Linkedin, Wordpress, Origin, Steam, Microsoft, InstaFollowers Phisher

Language:HTML86 10 5

CVE-2020-15906

Writeup of CVE-2020-15906

Language:Python45 40

CVE-2023-30367-mRemoteNG-password-dumper

Original PoC for CVE-2023-30367

Language:C#MIT13 20

Invoke-Brute7z

PowerShell Script to BruteForce 7 Zip password protected files

Language:PowerShell4 10

adPEAS

Powershell tool to automate Active Directory enumeration.

Language:PowerShell200

Compile-C-to-Wasm-

Compile C to Wasm and display an Image in the Browser

2 20

Spawn-TrustedInstallerprocess

needs local admin

Language:PowerShell2 10

TangledWinExec

PoCs and tools for investigation of Windows process execution techniques

Language:C#BSD-3-Clause200

airgeddon_fritzbox_et_captive_portal_plugin

A captive portal plugin to phish Fritz!Box network credentials

Language:ShellGPL-3.01 10

CVE-2020-29254

TikiWiki 21.2 allows to edit templates without the use of a CSRF protection.

1 30

CVE-2021-24884

If an authenticated user who is able to edit Wordpress PHP code in any kind, clicks a malicious link, PHP code can be edited through XSS in Formidable Forms 4.09.04.

1 10

CVE-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

1 10

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Language:PythonMIT1 10

TokenDuplication

Using Tokenduplication to steal tokens and start new processes

Language:C#1 10

CVE-2020-29669

Macally WIFISD2

Language:Python010

AllAboutBugBounty

All about bug websites (bypasses, payloads, and etc)

010

BloodHoundQueries

Language:Python000

colabcat

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

Language:Jupyter NotebookMIT000

cvebase.com

cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vulnerabilities & PoCs

010

DavRelayUp

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

Language:C#000