Yara-rules

About What is this? A repo containing some of my privately developed Yara rules. Why? To contribute to the community. Can I use these rules? Of course! That's why I created this repo. You can use them in your detection systems. For example, CAPE sandbox, MalwareBazaar, UnPac.me and VirusTotal mus...

WonkaVision

WonkaVision WonkaVision is a proof of concept POC tool to analyze Kerberos tickets and attempt to determine if they are forged. This tool was created by Charlie Clark and Andrew Schwartz. It should be noted that this POC is not intended to be a production-ready enterprise application, but rather ...

SharpGmailC2

SharpGmailC2 Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 Gmail via imap protocol DISCLAIMER: This Project doesn't work against Windows Defender after 29th of November, 2022. This tool is now signatured by MS Windows as virtool:msi...

palera1n

palera1n Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher. --- A screenshot of palera1n being used in a Terminal Device Support Note that on A11 iPhone X, 8, 8 Plus, you must disable your passcode while in the jailbroken state on iOS 16, you need to reset...

hyperpom

HYPERPOM AArch64 fuzzing library based on the Apple Silicon hypervisor Table of contents Disclaimer Getting Started Prerequisites Self-Signed Binaries and Hypervisor Entitlement Compilation Workflow Documentation Examples Running the Tests Authors Hyperpom is a coverage-guided mutation-based...

ProxyNotShell-PoC

Working PoC for CVE-2022-41040 and CVE-2022-41082 A.K.A ProxyNotShell Requirement: pip install requestsntlm2 requests Usage: root@kitploit: python pocaug3.py Creds: ProxyShell PoC script from: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc's blog post...

vulnerable-code-snippets

Vulnerable Code Snippets Vulnerabilities | Programming languages | Run a vulnerable code snippet | Installation | Update YesWeHack present code snippets containing several different vulnerabilities to practice your code analysis in a safe dockerized envoriment. The vulnerable code snippets are...

orpheus

Orpheus Orpheus is a wrapper for a modified version of Impacket's GetUserSPNs.py and kerberosv5.py which alters the KDC Options Ticket Options and the Encryption Type for Kerberoasting. Side Note: Orpheus is named after the Greek god that was able to get past Cerberus the three headed dog to get...

TJ-OSINT-Notebook

TJ-OSINT-Notebook Intial Release November 18th 2022 Main Purpose: This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and OSINT operations. This Notebook has helped me in many situations to learn more...

DAILA

DAILA The Decompiler Artificially Intelligent Language Assistant DAILA is a unified interface for AI systems to be used in decompilers. With DAILA, you can utilize various AI systems, like local and remote LLMs, all in the same scripting and GUI interfaces across many decompilers. DAILA was...

DCOMPotato

Exploit collection for some Service DCOM Object local privalege escalation vulnerabilityby SeImpersonatePrivilege abuse writeup DCOM use RPCCIMPLEVELIDENTIFY as default impersonation level, for the default out-bound IUnknown call, see...

SharpExchange

SharpExchange This command line POC that shows how C can be used to interact with Microsoft Exchange EWS. Showing that it can be done in other tooling other than Powershell. Yes this is a simple POC to show how it could be done. Its not 100%. You want to show off your l33t C coder or red teamer...

DynamicDotNet

DynamicDotNet A collection of various and sundry code snippets that leverage .NET dynamic tradecraft Purpose To showcase offensive and defensive tooling and POCs that leverage .NET dynamic loading, staging, bootstrapping, types, objects, functions, etc. Contribute Source Code & Text Documents All...

IntelTXE-PoC

Disclaimer All information is provided for educational purposes only. Follow these instructions at your own risk. Neither the authors nor their employer are responsible for any direct or consequential damage or loss arising from any person or organization acting or failing to act on the basis of...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

SharPersist

SharPersist Windows persistence toolkit written in C. For detailed usage information on each technique, see theWiki. Author - Brett Hawkins @h4wkst3r Release Public version 1.0.1 of SharPersist can be found in the Releases section Installation/Building Pre-Compiled Use the pre-compiled binary in...

priority-intelligence-requirements-dev

Developing Priority Intelligence Requirements @ Red Hat v1.1 In the rapidly evolving landscape of cyber threat intelligence CTI, the formulation of Priority Intelligence Requirements PIRs stands as a crucial component of your CTI program and the planning and direction phase of the intelligence...

GhidraEmu

GhidraEmu This experimental Ghidra plugin allows you to easily deal with native pcode emulation. No scripts are needed anymore, just use it directly from Ghidra. It can be particularly useful for working with a variety of exotic processors that are not supported by common emulators. If the...

POC-CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...

Damn_Vulnerable_C_Program

Note: file name has been changed from imgRead.c to dvcp.c, if you are watching videos, you will see imgRead.c but in github repo you will see dvcp.c, please use correct filename. Damn Vulnerable C ProgramDVCP My YouTube Channel: https://www.youtube.com/user/MrHardik05/featured?viewas=subscriber...