71 matches found
hinge-command-control-c2
Using Hinge as a Command & Control Server Please see https://mattwie.se/hinge-command-control-c2...
xeca
xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...
SwiftBelt
SwiftBelt About SwiftBelt is a macOS enumerator inspired by @harmjoy's Windows-based Seatbelt enumeration tool. SwiftBelt does not utilize any command line utilities and instead uses Swift code leveraging the Cocoa Framework, Foundation libraries, OSAKit libraries, etc. to perform system...
Browser-ExternalC2
Browser-EC2...
kubesploit
Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...
ccat
Cloud Container Attack Tool CCAT ☁️🐈...
Powermad
PowerShell MachineAccountQuota and DNS exploit tools Wiki https://github.com/Kevin-Robertson/Powermad/wiki Blog Post Beyond LLMNR/NBNS Spoofing - Exploiting Active Directory-Integrated DNS Functions MachineAccountQuota Functions DNS Functions Dynamic Updates Functions ADIDNS Functions Miscellaneo...
shocker
Shocker Una herramienta para encontrar y explotar servidores vulnerables a Shellshock Referencia: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Publicado como código abierto por NCC Group Plc - https://www.nccgroup.trust/ Desarrollado por: Tom Watson, tom dot watson at nccgroup dot trust...
tplmap
Tplmap Este proyecto ya no recibe mantenimiento. Estaré encantado de fusionar nuevos PRs siempre que no rompan el conjunto de pruebas. Tplmap ayuda en la explotación de vulnerabilidades de Inyección de Código e Inyección de Plantillas del Lado del Servidor SSTI mediante diversas técnicas de escap...
DarkLoadLibrary
DarkLoadLibrary LoadLibrary for offensive operations. How does it work? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Usage DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading from disk NULL, // dll buffer ...
RemoteKeyStrokes
RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...
gpblib
GPBLib GPBLib contains the common code used by the GroupPolicyBackdoor, OUned and GPOddity projects for GPO manipulations...
SelectMyParent
What's this This is a project for parent process spoofing. How to use step 1:Select a parent process and remember the pid Step 2:Execute the following command. Implement parent process spoofing SelectMyParent.exe notepad 928 Step 3:Using process explorer to view the process tree, you can see the...
exploit
Exploit Оффенсивный хакерский инструмент Начало работы Это хакерский инструмент или программа, закодированная и созданная для помощи хакеру во взломе и выполнении эксплойтов. По вопросам Telegram: https://t.me/bitgodhack Email: [email protected] Требования к установке на любом дистрибутиве...
Offensive Tool Determination Strategy R.I.D.D.L.E. + (C)
Intentional threats are a major risk factor related to vulnerabilities in critical infrastructure assets, and an accurate risk assessment is necessary to analyze threats, assess vulnerabilities, and evaluate potential impacts on assets and systems. This research proposes a methodology that can be...
Xss-Wordlist
It is an offensive tool for web application security testing. Th...
Zero-Days
It is an offensive tool for Windows. This repository appears to...
dzzoffice_upload
It is an offensive tool for web application exploitation. The re...