OffensivePipeline

OffensivePipeline OffensivePipeline allows you to download and build C tools, applying certain modifications in order to improve their evasion for Red Team exercises. A common use of OffensivePipeline is to download a tool from a Git repository, randomise certain values in the project, build it,...

CVE-2017-8759

Exploit toolkit for CVE-2017-8759 Do not be an asshole Simple tool written in C to handle the RCE vulnerability in .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7. aka ".NET Framework Remote Code Execution Vulnerability." Help C:\Users\Jonas Uliana\toolsCVE-2017-8759.exe /h INFO ...

AsyncRAT-C-Sharp

AsyncRAT AsyncRAT is a Remote Access Tool RAT designed to remotely monitor and control other computers through a secure encrypted connection Included projects This project includes the following Plugin system to send and receive commands Access terminal for controlling clients Configurable client...

CVE-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

Vm4J

Vm4J A tool for detect vmware product log4j vulnerability. How it works? First start a JNDIExploit server. Start this tool and set any config to right setting. Send payload. Screenshot Support VMware HCX VMware vCenter VMware Workspace One Will be add VMware NSX VMware Horizon VMware vRealize...

Blacklist3r

Blacklist3r The goal of this project is to accumulate the secret keys / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage ...

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

SharpShooter

/ // / / // / / / \ / / / / \ / / / / / / / / / / / / // / / / // // / / / / // / // / // / / /// //,// / ./// /////// // Description SharpShooter is a payload creation framework for the retrieval and execution of arbitrary CSharp source code. SharpShooter is capable of creating...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

Secure-Desktop

Secure-Desktop Secure Desktop is a tool for Windows to open programs in a safe area where keyloggers and Remote Administration Tools cannot access by any conventional means. Software keyloggers work by setting up a Windows hook that tells Windows that whenever the user presses a key or uses their...

CVE-2019-0708-test

CVE-2019-0708-test CVE-2019-0708 C Vulnerability Verification Programming Language: C Programming Software: Visual Studio 2012 Programming Environment: .Net Framework 4.5 A software written in C to verify the CVE-2019-0708 vulnerability Calls 0708detector.exe released by 360's 360Vulcan Team...

SharpKiller

SharpKiller Lifetime AMSI bypass AMSI-Killer by @ZeroMemoryEx ported to .NET Framework 4.8. Additional Obfuscation required https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=VirTool:MSIL/SharpKiller.A&ThreatID=2147895059 Newly integrated features: x - Live scan fo...

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

CVE-2017-8759_-SOAP_WSDL

What is CVE-2017-8759 is Remote Code Execution Vulnerability On SOAP WDSL A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an...

OHTS

OHTS CVE-2017-8759 | .NET Framework Remote Code Execution Vulnerability 1. Introduction A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

MemTracer

MemTracer MemTracer is a tool that offers live memory analysis capabilities, allowing digital forensic practitioners to discover and investigate stealthy attack traces hidden in memory. The MemTracer is implemented in Python language, aiming to detect reflectively loaded native .NET framework...

AoratosWin

AoratosWin AoratosWin is a tool that removes traces of executed applications on Windows OS which can easily be listed with tools such as ExecutedProgramList by Nirsoft. Feel free to decompile, reverse, redistribute, etc. Supported OS Tested On Windows 7 x86, x64 Windows 8 x86, x64 Windows 8.1 x86...

VulnerableDotNetHTTPRemoting

Vulnerable Dot Net HTTP Remoting Project This repository contains a vulnerable C application client/server that uses .NET Remoting over HTTP. This can be used for testing purposes and can be compiled using different versions of .NET Framework. It also includes a copy of ysoserial.net 15/03/2018...