Julian Horoszkiewicz's repositories
psychoPATH
psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.
icmpsh-s-linux
GNU/Linux version of the https://github.com/inquisb/icmpsh slave
localdataHog
String-based secret-searching tool (high entropy and regexes) based on truffleHog
api-ms-win-code-debug-l1-1-0
A sample DLL appending a text file with the list of high integrity/SYSTEM process that loaded it (for issue testing).
Windows_persistence
A collection of persistence methods for Windows
registry_hidden_key
A CPP demo POC based on https://github.com/ewhitehats/InvisiblePersistence/blob/master/InvisibleRegValues_Whitepaper.pdf
CVE-2024-0197-POC
Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK.
ZScaler_msiexec_LPE_2023
My proof of concept for a Local Privilege Escalation via msiexec in ZScaler Client Connector 3.7.2.18
CVE-2023-38041-POC
Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept
CVE-2024-25376-POC
CVE-2024-25376 - Local Privilege Escalation in TUSBAudio
CVE-2023-7016-POC
POC for the flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows that allows an attacker to execute code at a SYSTEM level via local access.
CVE-2024-35315-POC
Mitel Collab Local Privilege Escalation CVE-2024-35315 PoC
process-injection-postgre
A proof of concept for https://hackingiscool.pl/breaking-out-from-stripped-tokens-using-process-injection/
attack_monitor
Endpoint detection & Malware analysis software
COMThanasia
A set of programs for analyzing common vulnerabilities in COM
grey_reach
A BurpSuite Pro plugin aimed at deepening the coverage of blackbox/greybox tests by reaching non-default conditional blocks.
InfinityHook
Hook system calls, context switches, page faults and more.
Service_SDDLs
POC codes and helpers used in https://hackingiscool.pl/using-edr-telemetry-for-offensive-research-part-2-service-sddls/
SharpBlock
A method of bypassing EDR's active projection DLL's by preventing entry point exection
shellnoob
A shellcode writing toolkit