vysecurity

RedTips

Red Team Tips as posted by @vysecurity on Twitter

ANGRYPUPPY

Bloodhound Attack Path Automation in CobaltStrike

CobaltSplunk

Splunk Dashboard for CobaltStrike logs

magnifier0day

Windows 10 Privilege Escalation (magnifier.exe) via Dll Search Order Hijacking

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

vmware_vcenter_cve_2020_3952

Exploit for CVE-2020-3952 in vCenter 6.7

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the pentesters during an engagement / A valid dataset for the data scientist

GoPurple

Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

VmdkReader

.NET 4.0 Console App to browse VMDK images and extract files

AzureWireGuard

Automated WireGuard Deployment on Azure

CVE-Exploits

PoCs for public CVE's I have been working on.

HaE

HaE - BurpSuite Highlighter and Extractor

HOLYWATER

JSFScan.sh

Automation for javascript recon in bug bounty.

Linux-NetSpeed

将Linux现常用的网络加速集成在一起

ntfsDump

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

PrivescCheck

Privilege Escalation Enumeration Script for Windows

Telemetry

WINDOWS TELEMETRY权限维持

CobaltStrike-BOF

Collection of beacon BOF written to learn windows and cobaltstrike

github-daily

GitHub daily top 10 repos

godnslog

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

ippsec.github.io

no-sandbox

No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox. TL;DR exploits in these browser based applications are already sandboxed escaped: https://no-sandbox.io/

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

ob_hacky_slack

Hacky Slack - a bash script that sends beautiful messages to Slack

Reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

SHAPESHIFTER

Companion PoC for the "Adventures in Dynamic Evasion" blog post

tangalanga

Tangalanga: the Zoom conference scanner hacking tool

Telemetry-1

ABUSING WINDOWS TELEMETRY FOR PERSISTENCE

vmcli

A set of utilities (vmcli + vmctl) for macOS Virtualization.framework