deltaclock

BookStack

A platform to create documentation/wiki content built with PHP & Laravel

diaphora

Diaphora, the most advanced Free and Open Source program diffing tool.

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

frida-snippets

Hand-crafted Frida examples

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

KrbRelayUp

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

param-miner

C2-Tool-Collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

unxip

A fast Xcode unarchiver

KrbRelay

Framework for Kerberos relaying

SmartContracts-audit-checklist

A checklist of things to look for when auditing Solidity smart contracts.

WinDbg-Samples

Sample extensions, scripts, and API uses for WinDbg.

Facebook-BugBounty-Writeups

Collection of Facebook Bug Bounty Writeups

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

blackboxprotobuf

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

CVE-2022-21882

win32k LPE

WinDbg_Scripts

Useful scripts for WinDbg using the debugger data model

DeepSleep

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

WinDbgCookbook

This is a repo for small, useful scripts and extensions

windbg_js_scripts

Toy scripts for playing with WinDbg JS API

AERoot

AERoot is a command line tool that allows you to give root privileges on-the-fly to any process running on the Android emulator with Google Play flavors AVDs.

wpgarlic

A proof-of-concept WordPress plugin fuzzer

CVE-2022-26133

Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification.

InsecureShop

An Intentionally designed Vulnerable Android Application built in Kotlin.

BlueTeam.Lab

Blue Team detection lab created with Terraform and Ansible in Azure.

HintInject

A PoC project for embedding shellcode to Hint/Name Table

cashio-exploit-workshop

Write your own exploit for $CASH

VoWiFiLocalDemo

Docker container that runs StrongSwan and Kamailio to demonstrate how Wi-Fi calling works on smartphones.

CVE-2022-23967

TightVNC Vulnerability.

FridaHookGenerator

Auto Frida Hook Generator