Giter VIP home page Giter VIP logo

exploits's Introduction

Welcome to Hacker House open-source releases. All files released by Hacker House are available under a Attribution-NonCommercial-NoDerivatives 4.0 International license unless otherwise explicitly stated. These repositories provide educational content for ethical hacking and cyber security practioners. Use in ANY criminal activity is strictly prohibited and against the terms of the software license agreement. A table is provided here to help navigate.

URL Repository Name Description
backdoors backdoors Tools for maintaining access to systems and proof-of-concept demonstrations.
exploits exploits exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House
shellcode shellcode shellcode are codes designed to be injected into the memory space of another process during exploitation.
tools tools A collection of tools created for computer security research purposes.
documents documents Papers, presentations and documents from the team at Hacker House.
OffensiveLua OffensiveLua Offensive Lua. A project to create Lua hacking scripts for Windows platforms.
AESCrypt AESCrypt AES-256 Microsoft Cryptography API Example.
SignToolEx SignToolEx Hack "signtool.exe" to use expired certificates for code-signing
Marble Marble Framework Marble Framework allows for flexible and easy-to-use obfuscation when developing tools, fixed source from Wikileaks
WMIProcessWatcher WMI Process Watcher A CIA tradecraft technique to asynchronously detect when a process is created using WMI.
Artillery Artillery A CIA technique for UAC bypass which utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administrator for persistence.
Stinger Stinger A CIA technique for UAC bypass that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as administrator. 20% cooler
iscsicpl_bypassUAC iscsicpl_bypassUAC UAC bypass for x64 Windows 7 - 11
CompMgmtLauncher_DLL_UACBypass CompMgmtLauncher_DLL_UACBypass CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive
Gigabyte_ElevatePersist Gigabyte_ElevatePersist Giga-byte Control Center (GCC) Elevation & Persist
cve-2021-34527 cve-2021-34527 CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation
MsSettingsDelegateExecute MsSettingsDelegateExecute Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key.
NoFaxGiven NoFaxGiven Code Execution & Persistence in NETWORK SERVICE FAX Service
hfioquake3_DoS hfioquake3_DoS ioquake3 engine is vulnerable to a remotely exploitable off-by-one overflow
envschtasksuacbypass envschtasksuacbypass Bypass UAC elevation on Windows 8 (build 9600) & above.
ColorDataProxyUACBypass ColorDataProxyUACBypass Exploits undocumented elevated COM interface ICMLuaUtil to trigger UAC bypass. Win 7 & up.
cve-2018-10933 cve-2018-10933 cve-2018-10933 libssh authentication bypass
electionhacking electionhacking Diebold Accuvote-TSx Election Machine Hacking
rebirth rebirth rebirth IOS11 - 11.3.1 jailbreak security research utility
pyongyang_2407 pyongyang_2407 Pyongyang 2407 - Android ROM from North Korea, hardware and booting instructions.

exploits's People

Contributors

covecredit avatar hackerhouse-opensource avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

exploits's Issues

heartbleed-keyscan.py script is broken

Hello,

I have tried to use the heartbleed-keyscan.py script on a server memory dump (following the Hands On Hacking book) but the script raises the following exception:

Key size: 128
Data length: 262162
server_memory_dump_heartbleed_exploit.bin Offset 0x26e8d:
q = 176895773405621116307788280133420039997222041927523934480318688488979297390501409476979381325487723537203899797473386523980759525945000992510418473771155902173861665533756659990531321296655916345221796401613446653288929898078029282412625028093260043133036581197733169859097558754479002499112198768900474336027
p = 151364638100355176693661398024098730528154159832442956085348149483923804360079088674951666688921823944270058619788401459978290166687493918707176668921114637104351859831061576926116485098591107562914922077134214166121123797285938887040317276229708349784252604661316025693481643254971077966517600088960886610599

Traceback (most recent call last):
  File "/home/kali/Downloads/keyscan.py", line 67, in <module>
    sys.exit(main(*sys.argv[1:]))
  File "/home/kali/Downloads/keyscan.py", line 61, in main
    seq.setComponentByPosition (len (seq), Integer (x))
  File "/usr/lib/python3/dist-packages/pyasn1/type/univ.py", line 2267, in __len__
    return len(self._componentValues)
  File "/usr/lib/python3/dist-packages/pyasn1/type/base.py", line 214, in plug
    raise error.PyAsn1Error('Attempted "%s" operation on ASN.1 schema object' % name)
pyasn1.error.PyAsn1Error: Attempted "__len__" operation on ASN.1 schema object

Please find the pem and server_memory file in the attached zip to recreate the issue
files.zip

hfsunsshdx.tgz fails to compile using gcc v4.8.5

$ make
gcc main.c -o hfsunsshdx -lssh2
main.c: In function ‘prepare_payload’:
main.c:308:3: error: ‘for’ loop initial declarations are only allowed in C99 mode
   for(int i =0;i <= (512 - len);i++){
   ^
main.c:308:3: note: use option -std=c99 or -std=gnu99 to compile your code
make: *** [hfsunsshdx] Error 1

The mentioned addition is enough for compilation to succeed:

--- a/Makefile
+++ b/Makefile
@@ -1,7 +1,7 @@
 all: hfsunsshdx

 hfsunsshdx: main.c
-       gcc main.c -o hfsunsshdx -lssh2
+       gcc main.c -o hfsunsshdx -lssh2 -std=c99

 clean:
        rm -rf hfsunsshdx

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.