p0dalirius

public-esaip-ctf-2023

keepass-dump-masterkey

Script to retrieve the master password of a keepass database <= 2.53.1

pyrtmidi

Realtime MIDI I/O for python.

sonos

CVE-2022-41876

PoC for CVE-2022-41876

TokenUniverse

An advanced tool for working with access tokens and Windows security policy.

ContextMenuHijack

Execute a payload at each right click on a file/folder in the explorer menu for persistence

sns

IIS shortname scanner written in Go

EfsPotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

Windows_LPE_AFD_CVE-2023-21768

LPE exploit for CVE-2023-21768

Windows_LPE_AFD_CVE-2023-21768

LPE exploit for CVE-2023-21768

blackarch

An ArchLinux based distribution for penetration testers and security researchers.

graphcat

Generate graphs and charts based on password cracking result

DonPAPI

Dumping DPAPI credz remotely

certsync

Dump NTDS with golden certificates and UnPAC the hash

SharpEfsPotato

Local privilege escalation from SeImpersonatePrivilege using EfsRpc.

FlipperAnimationManager

Visualize and manage your Flipper Zero animations directly from your computer - Flipper Animation Manager

Kubestroyer

Kubernetes exploitation tool

Bropper

An automatic Blind ROP exploitation tool

noPac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

lib-parseargs

A simple library to parse command line arguments in C++.

Gepetto

IDA plugin which queries OpenAI's GPT language models to speed up reverse-engineering

CVE-2022-33679

One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html

twitter-archive-parser

Python code to parse a Twitter archive and output in various ways

AES-Square-Attack

This tool is the implementation of the Square-Attack on an AES-128

bypass-url-parser

bypass-url-parser

RustPacker

Template-based shellcode packer written in Rust, with indirect syscall support. Made with <3 for pentesters.

php7.4.26-internalog

php7.4.26-internalog