mirchr

security-research

Security Research

openssldir_check

A Windows utility to check for potential insecure paths used by the OPENSSLDIR build parameter in OpenSSL libraries

DumpTomcatSessions

Dump Tomcat sessions using JMX

jmxshell

collectd

The system statistics collection daemon. Mirror of the canonical repository (updated automatically). Please send Pull Requests here!

CVE-2017-10271

WebLogic Exploit

CVE-2020-2883

Weblogic coherence.jar RCE

evilpdf

Embedding executable files in PDF Documents

FallofSudo

Pwning sudo rules!

hikvision-xor-decrypter

Used for breaking XOR encryption on Hikvision configuration files that have been decrypted using aes-128-ecb

kerberoast

Kerberoast attack -pure python-

luci

LuCI - OpenWrt Configuration Interface

mirror1.malwaredomains.com

Used by Pi-hole. Copy of justdomains from Google cache.

PoC

Pwdb-Public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

SMBGhost_RCE_PoC

smbmap

SMBMap is a handy SMB enumeration tool

ssscache2john

Convert SSSD cache files to John The Ripper format

sudo_pair

Plugin for sudo that requires another human to approve and monitor privileged sudo sessions

Web-CTF-Cheatsheet

Web CTF CheatSheet 🐈

blog.mirch.io

cmd.jsp

A super small jsp webshell with file upload capabilities.

incognito

One Token To Rule Them All https://labs.mwrinfosecurity.com/blog/incognito-v2-0-released/

openedr

Open EDR public repository

RemoteIDSpoofer

NodeMCU RemoteID Spoofer

sec-tools

A set of security related tools

Team-Ares

Repository for all TeamARES POC code and tools.

ToneLoc

Public non-official repository of the famous ToneLoc wardialer

unifi-inform-protocol

Information about the reverse engineered inform protocol used in Ubiquiti's UniFi access points