effective-waffle

effective-waffle yet another sleep encryption thing. also used the default github repo name for this one. TpAllocWork + TpPostWork + TpWaitForWork + TpReleaseWork to create + execute + clean the callback. The callback is some scuffed assembly that queues up a ton of rop gadgets that will pop...

PPLFault

PPLFault By Gabriel Landau at Elastic Security. From PPLdump Is Dead. Long Live PPLdump! presented at Black Hat Asia 2023. PPLFault 2024-02 UPDATE: Microsoft patched PPLFault on 2024-02-13. Seethis thread for related discussion. Exploits a TOCTOU in Windows Code Integrity to achieve arbitrary cod...

GetLAPSPassword

GetLAPSPassword A feeble attempt at writing a LAPS dumping tool that supports both NTLM and Kerberos auth using the impacket library. Initial structure of this tool was taken from the impacket example GetADUsers.py https://github.com/fortra/impacket/raw/master/examples/GetADUsers.py and the LDAP...

snapchange

Snapchange Lightweight fuzzing of a memory snapshot using KVM Snapchange provides the ability to load a raw memory dump and register state into a KVM virtual machine VM for execution. At a point in execution, this VM can be reset to its initial state by resetting the dirty pages found by KVM or...

ctl_ctloutput-leak

ctlctloutput-leak The ctlctloutput function in macOS High Sierra 10.13 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space. ctlctloutput-leak is a proof-of-concept exploit that attempts to trigger this information...

Cve-api

Parse & filter the latest CVEs from https://cve.mitre.org Docs Usage http://localhost:4000/cve?target=KEYWORD The year parameter is optional. http://localhost:4000/cve?target=KEYWORD&year=YEAR Examples http://localhost:4000/cve?target=ruby%20on%20rails...

CVE-2022-28672

CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner WCVS is a fast and versatile CLI scanner for web cache poisoning and web cache deception developed by Hackmanit and Maximilian Hildebrand. The scanner supports many different web cache poisoning and web cache deception techniques, includes a crawler to identify...

PowerShell-for-Hackers

2022 Hak5 hacker of the Year Table of Contents 1. Description 2. The Functions 3. Contact 4. Acknowledgments PowerShell Functions For Hackers 🤓💻 I am currently the 1 ranked payload contributor to Hak5. I decided to make this repository to share all of the functions I have come up with to develop ...

codejail

CodeJail CodeJail manages execution of untrusted code in secure sandboxes. It is designed primarily for Python execution, but can be used for other languages as well. Security is enforced with AppArmor. If your operating system doesn't support AppArmor, or if the AppArmor profile is not defined a...

HyperDeceit

HyperDeceit This repository contains the full source-code of the HyperDeceit project which is a library that allows you to impersonate as Hyper-V and intercept hypercalls done by the Windows kernel. Blog post: https://reversing.info/posts/hyperdeceit/ Disclaimer The code has not been through prop...

BLACKHAT_Asia2023

BLACKHATAsia2023 Just About BLACKHAT USA2022 PDF Public File List, Search what your intersting. BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

scapy

Scapy Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to...

smartmap

Godview Godview is a map based entirely on LLMs Large Language Models and OSM Open Street Map. Uses Anthropic, DeepSeek or Open AI. Godview also runs locally with Ollama. Website: godview.ai Installation Pull repository git clone https://github.com/space0blaster/godview.git Install Install...

PPLFaultDumpBOF

This is a derivative work of https://github.com/gabriellandau/PPLFault. Please view that repo for all of the original research and further information This conversion intentionaly does not modify IOC's of the original tool release. PPLFaultDumpBOF Takes the original PPLFault and the original...

backdoor-apk

backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...

COFFLoader

COFF Loader This is a quick and dirty COFF loader AKA Beacon Object Files. Currently can run un-modified BOF's so it can be used for testing without a CS agent running it. The only exception is that the injection related beacon compatibility functions are just empty. The main goal is to provide a...

Recon2023

Recon 2023 slides and code...

yara-ttd

yara-ttd - The ultimate packer nemesis Use YARA rules on Time Travel Debugging traces 1. Demo 2. Motivations 3. Install 4. Usage 5. Upcoming features Demo A binary packed with UPX A simple binary that launches calc.exe, packed with UPX. yara-ttd finds the calc.exe string in the module memory,...

EvilCrowRF_Custom_Firmware_CC1101_FlipperZero

EvilCrowRFCustomFirmwareCC1101FlipperZero Idea, development and implementation of this firmware: h-RAT https://github.com/h-RAT/. Discord: hrat Idea, development and implementation of the original firmware: Joel Serna @JoelSernaMoreno - https://github.com/joelsernamoreno/. Main collaborator: Litt...