CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

PowerSploit

Forked to add a few features to PowerView.ps1 that I commonly perform manually This project is no longer supported PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment. PowerSploit is comprised of the following...

Windows-Privilege-Escalation-Notes

Windows Privilege Escalation Preferable room is https://tryhackme.com/room/windows10privesc, but u can use anything of your choice. Some resources, https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/...

physmem2profit

Physmem2profit Physmem2profit can be used to create a minidump of a target host's LSASS process by analysing physical memory remotely. The intention of this research is to propose an alternative approach to credential theft and create a modular framework that can be extended to support other...

proteus

Proteus Proteus - The axiom database and API https://github.com/pry0cc/axiom. Originally, written for Hacking Together an ASM Platform Using ProjectDiscovery Tools. Setup First, clone the repository git clone https://github.com/pry0cc/proteus /.proteus cd /.proteus Next, modify config/notify.yaml...

like-dbg

LIKE-DBG LIKE-DBG LI nux-KE rnel-D eB uG ger is a fully containerized Linux kernel debugging and exploitation lab. It builds or adopts a kernel and root filesystem, boots them under QEMU, and drops you into an interactive GDB session pwndbg or GEF, wiring every piece into a single tmux window. Th...

AzureAttackKit

AzureAttackKit Collection of Azure Tools to Pull down for Attacking an Env from a windows machine or Cloudshell. Pre-Requisites Git for Windows if you want to auto pull down the latest versions of everything via powershell. Cloning To pull down all the modules you can run the following to pull th...

YARA_for_config_extraction

YARA Module Development and Config Extraction Blog Overview This repository contains the source code and content for my blog post on YARA Module Development and Config Extraction. In this blog, here is my guide into the process of creating a YARA module dedicated to extracting configurations. Blo...

ATP-PowerShell-Scripts

ATP-PowerShell-Scripts Microsoft Signed PowerShell scripts List of all the signed scripts available in C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection Accessing the file By default the files cannot be accessed. You need the TrustedInstaller privilege...

NimShellcodeFluctuation

NimShellcodeFluctuation Nim Port of the original repo: https://github.com/mgeeky/ShellcodeFluctuation All comments were copy pasted as they were from the original Repository as they really helped me to understand the technique. For more information about the technique itself I highly recommend...

Fermion

Fermion Fermion is an electron application that wraps frida-node and monaco-editor. It offers a fully integrated environment to prototype, test and refine Frida scripts through a single UI. With the integration of Monaco come all the features you would expect from Visual Studio Code: Linting,...

PsyloDbg

PsyloDbg PsyloDbg is a fast-growing and user-friendly open-source Windows Debugger entirely coded in Delphi. The main goal of this project is to offer to Malware analysts another tool to short their response time during their analysis process. The project is still in very early stage, it is...

Azure-AD-Incident-Response-PowerShell-Module

Azure AD Incident Response PowerShell Module The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team DART, to assist in compromise response. Why u...

SQLRecon

SQLRecon SQLRecon is a Microsoft SQL Server toolkit that is designed for offensive reconnaissance and post-exploitation. For detailed information on how to use each technique, refer to the wiki. You can download a copy of SQLRecon from the releases page. Alternatively, feel free to compile the...

Exploit for CVE-2026-89282

CVE-2026-89282: Apache Lounge Windows — DLL Search Order Hijac...

Bitmancer

Bitmancer Bitmancer is a library for Offensive Security Tooling development for the Windows operating system written in Nim. It aims to provide common APIs, routines, and macros with highly configurable, position-independent, standalone implementations. If you're looking to develop an Implant, te...

TokenMan

Access and Refresh Token Suite. Token Man is a tool for supporting post-exploitation activities using AAD access and/or refresh tokens. Table of Contents Usage Commands Fetch Search Swap FOCI Application Client ID Map AZ OAuth Usage usage: tokenman.py -h fetch,search,swap,az,oauth ... Token Man -...

KeeFarceReborn

KeeFarce Reborn A standalone DLL that exports databases in cleartext once injected in the KeePass process. Heavily inspired by the great KeeFarce, KeeThief and KeePassHax projects. Yet another KeePass extraction tool, why ? A few years ago, @denandz released KeeFarce, the first offensive tool...

Threat_Model_Examples

Threat Model Examples This repository contains various threat model examples for different technologies and systems. These resources provide illustrative examples of threat models across different domains, helping security professionals, developers, and researchers better understand how threat...

mi-x

Am I Exploitable? Author: 2022 - Now, Rezilion Description: Vulnerabilities validation Development: January 2022 - Now Documentation: See website, README Introduction Description ‘Am I Exploitable?’ is a python open source project that comes to meet the need of validating if your system is...