0next0 Goto Github PK

smblibrary

Free, Open Source, User-Mode SMB 1.0/CIFS, SMB 2.0, SMB 2.1 and SMB 3.0 server and client library

spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

sprayingtoolkit

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

sql-bof

Library of BOFs to interact with SQL servers

sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

sslh

Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

telerecon

A reconnaissance framework for researching and investigating Telegram.

tenable_poc

Proof of Concepts

titan

Titan is a VMProtect devirtualizer

toxssin

A POST-XSS exploitation tool.

triplecross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

vcenterkiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

vdr

Vulnerable driver research tool, result and exploit PoCs

vmware-exploitation

A collection of links related to VMware escape exploits

voidgate

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.

wdextract

Extract Windows Defender database from vdm files and unpack it

webshell

A collection of webshell

wfh

windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

wkpe

Windows Kernel Programming Experiments

wspcoerce

PoC to coerce authentication from Windows hosts using MS-WSP

xpipe

Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions

zonealarmlpe

Exploit for LPE in ZoneAlarm Antivirus/Firewall