Zeyad-Azima

Offensive-Resources

A Huge Learning Resources with Labs For Offensive Security Players

CVE-2024-27348

Apache HugeGraph Server RCE Scanner ( CVE-2024-27348 )

ShellcodeGenZ

GenZ Shellcode Generator to execute commands with winExec API

CVE-2023-26818

CVE-2023-26818 Exploit MacOS TCC Bypass W/ Telegram

GhidraDeepSeekDecomprove

A Ghidra script to improve decompiled code readability by re-writing it (Using DeepSeek) in a better way, Along with renaming/assigning variables based on their usage.

CVE-2022-1388

F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB

Need-IP

A tool for Pentesters & BugHunters to collect IPs of company, server, Operating System & many more

N0Pspoof

A tool to bypass and evade Portspoof solution

OutlookThief

A tool to abuse the current opened session of outlook to exfilitrate data through it.

Pentest-Tools

Some random tools I use for penetration testing

CVE-2022-22733

Apache ShardingSphere ElasticJob-UI Privilege Escalation & RCE Exploit

KILLx108

Exploit for unknown vulnerability in `ZXHN H168N V3.5` to kill the device with one request.

MacOSResearch

Collection of exploits for macos apps vulnerabilities that i found

Remedy4me

CVEs Remediation Scripts without a need to update the affected system, software, components & etc...

Allure_TestOps_StoredXss

Allure TestOps Stored XSS vulnerability

ASM-VSCode

VSCode Configuration files to easily compile, debug & run Assembly codes using system utilities

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

Issabel-stored-XSS

OSWP-PlayBook

A PlayBook for OSWP & Wireless Pentest

PBox

Password Manager to kill User's Experience for the Sake of User's Security

Vicidial-stored-XSS

0DayHugeGraph

RCE on patched HugeGraph Server

Allure_TestOps_IDOR

Allure TestOps IDOR vulnerability

AzRedTeamEnumScript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

db

Bugbounty utility to store the list of the enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

GymFit

metasploit-framework

Metasploit Framework

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

TelegramSwift

Source code of Telegram for macos on Swift 5.0