Registry-Recon

Registry-Recon Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon. Author: Jess Hires Description As a red-team practitioner, we are often using tools that attempt to fingerprint details about a compromised system, preferably in the most stealthy way possible. Some of our usual...

CreateHiddenAccount

CreateHiddenAccount 创建隐藏账号 中文 | EN Introducción a la Herramienta Hay dos formas comunes de crear una cuenta oculta. Una es agregar el signo $ directamente después del nombre de usuario para crearla, y la otra es usar el registro para clonar al usuario y crearla. Entonces me pregunté si podría...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

fingerprint

fingerprint Monitoreo de cambios en el Registro y Archivos en Windows - análisis forense para el registro y archivos de Windows "fingerprint" registra el estado de un sistema Windows, en términos de archivos y registro. Estas huellas digitales se pueden comparar para encontrar todos los datos...

tanstack-compromise-checker

tanstack-compromise-checker Detect indicators of the TanStack npm supply-chain attack on a developer machine, a repository, or a CI runner. Bash script, Docker image, and GitHub Action — same engine, three entry points. CVE-2026-45321 /GHSA-g7cv-rxg3-hmpx On May 11 2026, attackers published 84...

CVE-2024-23653

syntax=docker.io/zdfa/evilerfile FROM alpine RUN grep Cap /proc/self/status sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. ➜ cp sudo bin/buildctl build \ --frontend=dockerfile.v0 \ --local context=. \ --local dockerfile=. + Building 5.3s 6/6 FINISHED...

EXPLOIT-CVE-2026-56121

CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView gRPC Deserialization Unauthenticated remote code execution in Feast ⚠️ For authorized security testing and education only. Only run this against the bundled Docker lab or systems you own / are explicitly permitted to test. Unauthorized us...

r77-rootkit

r77 Rootkit Rootkit sin archivos de ring 3 r77 es un rootkit de ring 3 que oculta todo: Archivos, directorios Procesos y uso de CPU/GPU Claves y valores del registro Servicios Conexiones TCP y UDP Enlaces, named pipes, tareas programadas Ocultación por prefijo Todo lo que comienza con "$77" está...

OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ This repo is being wound down. Future work should be via www-project-vulnerable-web-applications-directory The OWASP Vulnerable Web Applications Directory Project VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/ is a comprehensive and well...

RustyWater-ShellCode-Dropper

RustyWater ShellCode Dropper RustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks. RustyWater is a Rust compiled executable disguised as reddit.exe with a fake Cloudflare icon known as RustyWater or linked to Archer RAT/RUSTRIC...

CVE-2022-30190-Follina-Patch

CVE-2022-30190-Follina-Patch This is a simple program allows you to complete the Workarounds temporary Patch at once instead of typing in cmd Addressed to specific people. Requires you to run it as an administrator. 6/2/2022 Images The exe file Manually Run Command Prompt as Administrator. To bac...

aggrokatz

aggrokatz What is this aggrokatz is an Aggressor plugin extension for CobaltStrike which enables pypykatz to interface with the beacons remotely. The current version of aggrokatz allows pypykatz to parse LSASS dump files and Registry hive files to extract credentials and other secrets stored...

hijackthis

Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...

harbor

Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

CVE-2018-8410

CVE-2018-8410 PoC for for Windows Kernel Registry Elevation of Privilege Vulnerability...

Registry-Spy

Registry Spy: Navegador de Registro de Windows Multiplataforma Registry Spy es un visor gratuito, de código abierto y multiplataforma del Registro de Windows. Es un explorador rápido, moderno y versátil para archivos de registro en bruto. Características: Soporte para Windows, macOS y Linux El...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

jmxbf

jmxbf - A brute force program to test weak accounts configured to access a JMX Registry Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniele Costa, daniele dot costa at nccgroup dot trust http://www.github.com/nccgroup/jmxbf Released under AGPL see LICENSE for...

HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...