7312 matches found
MSSQLand
✈️ MSSQLand Land gracefully in your target Microsoft SQL Server MS SQL DBMS, as if arriving on a business-class flight with a champagne glass in hand. 🥂 MSSQLand is a C Microsoft SQL Server MSSQL / MS SQL post-exploitation tool built for red team operators. Designed to run inside the target...
AoratosWin
AoratosWin AoratosWin is a tool that removes traces of executed applications on Windows OS which can easily be listed with tools such as ExecutedProgramList by Nirsoft. Feel free to decompile, reverse, redistribute, etc. Supported OS Tested On Windows 7 x86, x64 Windows 8 x86, x64 Windows 8.1 x86...
reko
reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...
CVE-2017-8759
Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...
CVE-2019-0708-test
CVE-2019-0708-test CVE-2019-0708 C Vulnerability Verification Programming Language: C Programming Software: Visual Studio 2012 Programming Environment: .Net Framework 4.5 A software written in C to verify the CVE-2019-0708 vulnerability Calls 0708detector.exe released by 360's 360Vulcan Team...
mal_unpack
malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: malunpack.exe...
AsyncRAT-C-Sharp
AsyncRAT AsyncRAT is a Remote Access Tool RAT designed to remotely monitor and control other computers through a secure encrypted connection Included projects This project includes the following Plugin system to send and receive commands Access terminal for controlling clients Configurable client...
OffensivePipeline
OffensivePipeline OffensivePipeline allows you to download and build C tools, applying certain modifications in order to improve their evasion for Red Team exercises. A common use of OffensivePipeline is to download a tool from a Git repository, randomise certain values in the project, build it,...
WebGoat.NET
Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...
DotNetHookerToolkit
InjectorCli + ManagedHookHostProj This repository contains two projects that are designed to be used together: InjectorCli: A .NET Framework 4.8 console injector built on frida-clr Frida.dll ManagedHookHostProj: A .NET Framework 4.8 helper DLL with native exports via 3F .NET DllExport used to...
SharpKiller
SharpKiller Lifetime AMSI bypass AMSI-Killer by @ZeroMemoryEx ported to .NET Framework 4.8. Additional Obfuscation required https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=VirTool:MSIL/SharpKiller.A&ThreatID=2147895059 Newly integrated features: x - Live scan fo...
Untrue
Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...
Evtx_Log_Browser
Evtx Log xml Browser Browse through Windows evtx event logs & export to xml Latest version ishere Dependencies: .NET Framework 4.8 Powershell Version: 5.1...
CVE-2017-8759
Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...
WebGoat.NET
Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...
Secure-Desktop
Secure-Desktop Secure Desktop is a tool for Windows to open programs in a safe area where keyloggers and Remote Administration Tools cannot access by any conventional means. Software keyloggers work by setting up a Windows hook that tells Windows that whenever the user presses a key or uses their...
NxRansomware
NxRansomware A next generation of ransomware. Fully written using a .Net Framework + C&C System Created By: Guilherme Bacellar Moralez Disclaimer This code is created and maintened only for a research proposal. Please do not use for other proposes. Please, do not run the code with a release...
Vm4J
Vm4J A tool for detect vmware product log4j vulnerability. How it works? First start a JNDIExploit server. Start this tool and set any config to right setting. Send payload. Screenshot Support VMware HCX VMware vCenter VMware Workspace One Will be add VMware NSX VMware Horizon VMware vRealize...
fakelogonscreen
FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...