febinrev

windows-coerced-authentication-methods

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

php_filter_chain_generator

OffSec-Reporting

Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

Leaked-Credentials

how to look for Leaked Credentials !

Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

HiddenVM

HiddenVM — Use any desktop OS without leaving a trace.

CVE-2023-36424

Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation

atril_cbt-inject-exploit

CVE-2023-44452, CVE-2023-51698: CBT File Parsing Argument Injection that affected Popular Linux Distros

slippy-book-exploit

CVE-2023-44451, CVE-2023-52076: RCE Vulnerability affected popular Linux Distros including Mint, Kali, Parrot, Manjaro etc. EPUB File Parsing Directory Traversal Remote Code Execution

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

PSBits

Simple (relatively) things allowing you to dig a bit deeper than usual.

diaphora

Diaphora, the most advanced Free and Open Source program diffing tool.

lolcerts

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

Cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

httrack

HTTrack Website Copier, copy websites to your computer (Official repository)

Detect-It-Easy

Program for determining types of files for Windows, Linux and MacOS.

libc-database

Build a database of libc offsets to simplify exploitation

AFLplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

CVE-2024-23897

bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework

Flipper-Zero-Sub-GHz-Jamming-Files

Looking for those jamming files that were removed from custom firmwares? Here they are. Only for educational purposes, of course.

flipperzero-wifi-marauder

Flipper Zero WiFi Marauder companion app

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

PySQLRecon

Offensive MSSQL toolkit written in Python, based off SQLRecon

linglong

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

AMSITrigger

The Hunt for Malicious Strings

dokuwiki

The DokuWiki Open Source Wiki Engine