ewilded

shelling

SHELLING - a comprehensive OS command injection payload generator

psychoPATH

psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.

PPID_spoof

An example of how to spawn a process with a spoofed parent PID (Visual C++)

icmpsh-s-linux

GNU/Linux version of the https://github.com/inquisb/icmpsh slave

SCARY

PHP Source Code Analyzer written in Perl (taint checking)

localdataHog

String-based secret-searching tool (high entropy and regexes) based on truffleHog

api-ms-win-code-debug-l1-1-0

A sample DLL appending a text file with the list of high integrity/SYSTEM process that loaded it (for issue testing).

dictator

Custom dictionary generation framework intended for enumertion of URL-s (directories, variables). With a bit of adjustment it would also be a good fit for passwords as well. This is currently NOT a Burp extension.

DFIR

Wykłady stworzone z myślą o studentach Politechniki Opolskiej (Wykrywanie i reagowanie na incydenty bezpieczeństwa).

Windows_persistence

A collection of persistence methods for Windows

registry_hidden_key

A CPP demo POC based on https://github.com/ewhitehats/InvisiblePersistence/blob/master/InvisibleRegValues_Whitepaper.pdf

CVE-2023-38041-POC

Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept

authz

CVE-2023-37250-POC

PoC

CVE-2024-25376-POC

CVE-2024-25376 - Local Privilege Escalation in TUSBAudio

fucking_with_filenames

Mobile

Wykłady stworzone z myślą o studentach Politechniki Opolskiej

attack_monitor

Endpoint detection & Malware analysis software

CVE-2023-7016-POC

POC for the flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows that allows an attacker to execute code at a SYSTEM level via local access.

CVE-2024-0197-POC

Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK.

displaylink-debian

DisplayLink driver installer for Debian/Ubuntu based Linux distributions.

distributions

NodeSource Node.js Binary Distributions

InfinityHook

Hook system calls, context switches, page faults and more.

MBE

Course materials for Modern Binary Exploitation by RPISEC

MBE-snippets

MimeSpray

MimeCast Password Spraying Tool

param-miner

SharpBlock

A method of bypassing EDR's active projection DLL's by preventing entry point exection

upload-scanner

HTTP file upload scanner for Burp Proxy

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.