maziland

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

awesome-browser-exploit

awesome list of browser exploitation tutorials

ShadowCoerce

MS-FSRVP coercion abuse PoC

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

awesome-console-services

A curated list of awesome console services (reachable via HTTP, HTTPS and other network protocols)

CVE-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

dostoevsky-pentest-notes

Notes for taking the OSCP in 2097. Read in book form on GitBook

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

Max

Maximizing BloodHound. Max is a good boy.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

SimpleAES

AES-256 encryption and decryption in Python for mere mortals.

CVE-2020-1362

writeup of CVE-2020-1362

evil-winrm

The ultimate WinRM shell for hacking/pentesting

CVE-2020-0796-LPE-POC

CVE-2020-0796 Local Privilege Escalation POC

SMBGhost_RCE_PoC

attack-arsenal

A collection of red team and adversary emulation resources developed and released by MITRE.

PoisonHandler

lateral movement techniques that can be used during red team exercises

DefenderCheck

Identifies the bytes that Microsoft Defender flags on.

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

StackBombing

Next gen process injection technique

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

VBA-RunPE

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

Windows-Insight

The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.