killix06 Goto Github PK

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

apc-ppid

Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.

attacksurfaceanalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

aws-security-automation

Collection of scripts and resources for DevSecOps and Automated Incident Response Security

burpsuiteloggerplusplus

Burp Suite Logger++: Log activities of all the tools in Burp Suite

casperstager

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.

chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

cloudfrunt

A tool for identifying misconfigured CloudFront domains

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

crackmapexec

A swiss army knife for pentesting networks

cve-2018-4193

exploit for CVE-2018-4193

cve-2019-0232

Apache Tomcat Remote Code Execution on Windows

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

dp_crypto

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

krbrelayx

Kerberos unconstrained delegation abuse toolkit

leaklooker

Find open databases with Shodan

mod0burpuploadscanner

HTTP file upload scanner for Burp Proxy

netsec-ps-scripts

Collection of PowerShell network security scripts for system administrators.

office-365-extractor

The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)

persistentcookiejar

A persistent CookieJar implementation for OkHttp 3 based on SharedPreferences.

polarbearrepo

powershell

probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

s3scanner

Scan for open AWS S3 buckets and dump the contents