xrahitel

quickjack

Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.

StopDefender

Stop Windows Defender programmatically

USBCloner

This PowerShell Script Checks For USB Drives Every 60 Seconds.If It Finds A USB Drive It Clones It To The Current Directory Its In.After Cloning The USB Drive Sleeps For 10 Minutes.

virus-githu

xToBatConverter

Generate a ms batch file and inject a files inside of it. When the batch is executed, the files are extracted and executed.

-WinRAR-

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

7-ZipPostExp

Post-Exploitation script to exfiltrate 7-zip files

AdvancedWebHackingWorkshop

Examples for Advanced Web Hacking Workshop

batch.scripts

batch script utils and examples by npocmaka -

botnet-browser-chrome

botnet browser chrome,mozilla firefox,capture card number any web site ,paypal,facebook,e-commerce ,get card number,expiration date, CVV

browser_pwn

browser pwn, main work now

calc_poc

A repository holding Proof of Concepts for executing the calculator application via different file formats

cookie_crimes

Read local Chrome cookies without root or decrypting

CVE-2017-10952

CVE-2023-38831-RaRCE

An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23

DataSurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Secuirty Numbers and more from text

domain-obfuscator

Make your domain weird, but still work :/

evilpdf

Embedding executable files in PDF Documents

evilreg

Hack windows shell by registery files

Exploit-CVE-2021-21086

hack-web-cam

Hack the webcam using simple Javascript AJAX and PHP.

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Macro-Keystrokes

PoC of execution of commands on a Word macro, without the use of rundll32.exe and importation of kernel32 libraries such as CreateRemoteThread or CreateProcessA. This technique simply relies on sending keystrokes to the host.

microsoft-diagcab-rce-poc

Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution

Office-phish-templates

Tricks the target into enabling content (macros) with fake messages. Once enabled, uses macros to reduce the risk of suspision from target user via verious methods.

PackMyPayload

A PoC that packages payloads into output containersb to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

portable-http-server

Simple HTTP Server with Dir Listing, Explore & File Upload support

server

Fake Adobe Flash

SigFlip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

test