cyberheartmi9

Frida-Guide

This repository explain how to write frida hook scripts and analysis written hooks.

Proxyshell-Scanner

nuclei scanner for proxyshell ( CVE-2021-34473 )

Learn-Resource

Resource Learn collection

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

MRF-Practice

a vulnerable android application to practice request forgery.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

OSEP

PEN-300 collection to help you on your exam.

Pre-compile-exp

Pre-compile

Vulnerable-By-Design

Awesome-Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

awesome-ios-security

A curated list of awesome iOS application security resources.

CVE-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

CVE-2021-1676

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

CVE-2022-39952

POC for CVE-2022-39952

file-reader

LdapRelayScan

Check for LDAP protections regarding the relay of NTLM authentication

LocalPotato

lsassy

Extract credentials from lsass remotely

My-Presentation-Slides

Collections of Orange Tsai's public presentation slides.

OSED

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

pics

File formats dissections and more...

PInvoke

ProxyNotShell-PoC

RedditC2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops

SharpGmailC2

Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol

SharpGPOAbuse

SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by that GPO.

SharpShooter

Payload Generation Framework

wifijammer

Continuously jam all wifi clients/routers