cstahly Goto Github PK

cherrytree

cherrytree

chicken-and-butts

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

crackmapexec

A swiss army knife for pentesting networks

creds

Some usefull Scripts and Executables for Pentest & Forensics

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

denver

fastlane

🚀 The easiest way to automate building and releasing your iOS and Android apps

frida-scripts

A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps.

hackrf_signal_detector

Full Spectrum Signal Detector using HackRF SDR

io_uring_lpe-cve-2024-0582

LPE exploit for CVE-2024-0582 (io_uring)

kenzer

automated web assets enumeration & scanning

linksys-smart-wifi-information-disclosure

Linksys Smart Wi-fi X-JNAP-Action Sensitive Information Disclosure for EA8500 router and potentially others

mcbt

Minecraft block tracker Bukkit plugin

passwordcrackingmethodology

My Password Cracking Methodology

pinduoduo_backdoor_unpacker

Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo

portapack-mayhem

Custom firmware for the HackRF+PortaPack H1/H2

redex

A bytecode optimizer for Android apps

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rootthebox

A Game of Hackers (CTF Scoreboard & Game Manager)

routersploit

Exploitation Framework for Embedded Devices

rubeus

Trying to tame the three-headed dog.

sampleapp

Sample application

sdrtrunk

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:

snmp-brute

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

ssh-snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

static-binaries

Various *nix tools built as statically-linked binaries

suid3num

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

windowsexploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)