POSTDump

POSTDump Another tool to perform minidump of LSASS process using few technics to avoid detection. POSTDump is the C / .NET implementation of the ReactOS minidump function like nanodump, thus avoiding call to the Windows API MiniDumpWriteDump function. The dump logic code is saved under the...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

longfellow-zk

Longfellow ZK Overview The Longfellow library enables the construction of zero-knowledge protocols concerning legacy identity verification standards such as the ISO MDOC standard, the JWT standard, and W3 Verifiable Credentials. This implementation is described in: Anonymous credentials from ECDS...

ImpulsiveDLLHijack

ImpulsiveDLLHijack C based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during RedTeam Operations to evade EDR's. 1. Methodological Approach : The tool basically acts on automating following...

Certify

Certify Certify is a C tool to enumerate and abuse misconfigurations in Active Directory Certificate Services AD CS. @harmj0y and @tifkin are the primary authors of Certify and the the associated AD CS research blog and whitepaper. Table of Contents Certify Usage Defensive Considerations Compile...

SessionHop

SessionHop SessionHop is a C tool that utilizes the IHxHelpPaneServer COM object, configured to run as an Interactive User, to hijack specified user sessions. By creating a session moniker and utilizing the COM object's Execute interface, operators can run arbitrary files within another user's...

tamago

TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors. The projects spawns from the desire of...

GDA-android-reversing-Tool

ˇ GDAGJoy Dex Analyzer GDA, an powerful Dalvik bytecode decompiler implemented in C++, which has the advantages of fast analysis and low memory&disk consumption and an stronger ability to decompiling the apk, dex, odex, oat, jar, class, aar files. GDA is completely native software and works witho...

Grok-backdoor

Grok-backdoor Grok-backdoor is a simple python based backdoor, it uses Ngrok tunnel for the C&C communication. Ngrok-backdoor can generate Windows, Linux and Mac binaries using Pyinstaller. How it works: Ngrok exposes local servers behind NATs and firewalls to the public internet over a secure...

CVE-2023-32571-POC

Dynamic Linq injection to RCE - CVE-2023-32571 About Dynamic Linq injection to RCE CVE-2023-32571 Recently, members of the NCC Group discovered a vulnerability in Dynamic Linq that allows attackers to call C functions through a Linq Injection, thus making it possible to obtain RCE. Even with the...

capstone

Capstone Engine !TIP Welcome to join our community group! Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capsto...

p0wnedShell

p0wnedShell PowerShell Runspace Post Exploitation Toolkit Author: Cn33liz and Skons Version: 2.6 License: BSD 3-Clause What is it: p0wnedShell is an offensive PowerShell host application written in C that does not rely on powershell.exe but runs powershell commands and functions within a powershe...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" Analysis Environment Docker-based practice environment for analyzing and developing exploits for the GNU C Library glibc dynamic loader buffer overflow vulnerability Local Privilege Escalation. CVE Information Item| Content ---|--- CVE Number| CVE-2023-4911 Alias|...

wsb-detect

⏳ wsb-detect wsb-detect enables you to detect if you are running in Windows Sandbox "WSB". The sandbox is used by Windows Defender for dynamic analysis, and commonly manually by security analysts and alike. At the tail end of 2019, Microsoft introduced a new feature named Windows Sandbox WSB for...

CVE-2021-44132

CVE-2021-44132 This script exploits a vulnerability in the OMCISHELL object for C-DATA proprietary routers such as BESTCOM...

tiny-AES-c

Tiny AES in C This is a small and portable implementation of the AES ECB, CTR and CBC encryption algorithms written in C. You can override the default key-size of 128 bit with 192 or 256 bit by defining the symbols AES192 or AES256 in aes.h. The API is very simple and looks like this I am using C...

Codecepticon

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/Codecepticon for the latest version. Codecepticon Table of Contents Introduction Read This First Prerequisites Visual Studio Roslyn Compiler Check to see if it works Using Codecepticon C VBA/VB6 PowerShell Obfuscating Command Li...

avcleaner

avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...

darksword-kexploit

DarkSword Kernel Exploit Reimplemented in Objective-C. Supposed to support iOS 15.0 - 26.0.1. Offsets hardcoded for 15.x? NOTE: THIS EXPLOIT WAS NOT DISCOVERED / LEAKED BY ME, THE ORIGINAL SOURCE FOR THE LEAK IS https://github.com/htimesnine/DarkSword-RCE THIS EXPLOIT IS ALSO COMPLETELY UNRELATED...

SharPersist

SharPersist Windows persistence toolkit written in C. For detailed usage information on each technique, see theWiki. Author - Brett Hawkins @h4wkst3r Release Public version 1.0.1 of SharPersist can be found in the Releases section Installation/Building Pre-Compiled Use the pre-compiled binary in...