Zeyad-Azima

Offensive-Resources

A Huge Learning Resources with Labs For Offensive Security Players

CVE-2024-27348

Apache HugeGraph Server RCE Scanner ( CVE-2024-27348 )

CVE-2023-26818

CVE-2023-26818 Exploit MacOS TCC Bypass W/ Telegram

CVE-2022-1388

F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB

Need-IP

A tool for Pentesters & BugHunters to collect IPs of company, server, Operating System & many more

N0Pspoof

A tool to bypass and evade Portspoof solution

OutlookThief

A tool to abuse the current opened session of outlook to exfilitrate data through it.

C3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

Pentest-Tools

Some random tools I use for penetration testing

CVE-2022-22733

Apache ShardingSphere ElasticJob-UI Privilege Escalation & RCE Exploit

KILLx108

Exploit for unknown vulnerability in `ZXHN H168N V3.5` to kill the device with one request.

Remedy4me

CVEs Remediation Scripts without a need to update the affected system, software, components & etc...

Vicidial-stored-XSS

Zeyad-Azima.github.io

xElkomy blog

Allure_TestOps_StoredXss

Allure TestOps Stored XSS vulnerability

ASM-VSCode

VSCode Configuration files to easily compile, debug & run Assembly codes using system utilities

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

Issabel-stored-XSS

Mythic

A collaborative, multi-platform, red teaming framework

portmaster

🏔 Love Freedom - ❌ Block Mass Surveillance

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Allure_TestOps_IDOR

Allure TestOps IDOR vulnerability

AzRedTeamEnumScript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

db

Bugbounty utility to store the list of the enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]

metasploit-framework

Metasploit Framework

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

OSWP-PlayBook

A PlayBook for OSWP & Wireless Pentest

red_team_tool_countermeasures

TelegramSwift

Source code of Telegram for macos on Swift 5.0