Marmelat

AD-Internal-Checklist

This is a checklist to follow when performing an Active Directory Pentesting.

Vm4J

A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations Manager

email2phonenumber

A OSINT tool to obtain a target's phone number just by having his email address

CVE-2020-3956

PoC exploit for VMware Cloud Director RCE (CVE-2020-3956)

SwaggerParser-BurpExtension

octosql

OctoSQL is a query tool that allows you to join, analyse and transform data from multiple databases and file formats using SQL.

CVE-2023-21752

elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

BypassAnti-Virus

免杀姿势学习、记录、复现。

Invoke-TheHash

PowerShell Pass The Hash Utils

RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

WEF

Wi-Fi Exploitation Framework

OSED

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

NMap-xml-to-docx

PPLdump

Dump the memory of a PPL with a userland exploit

WDBFontOverwrite

Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

wsuxploit

This is a weaponized WSUS exploit

cloudflare-origin-ip

Try to find the origin IP of a webapp protected by Cloudflare.

apk.sh

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

Hacking-APIs

oscp-prep

DAILA

A decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4 and local models supported!

usbrubberducky-payloads

The Official USB Rubber Ducky Payload Repository

db

Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]

uptime-kuma

A fancy self-hosted monitoring tool

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

kubeshark

The API traffic analyzer for Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by Wireshark, purposely built for Kubernetes

CVE-2022-45771-Pwndoc-LFI-to-RCE

Pwndoc local file inclusion to remote code execution of Node.js code on the server

SharpKatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands