leahxucud Goto Github PK

amber

Reflective PE packer.

atom-bombing

Brand New Code Injection for Windows

brokentype

TrueType and OpenType font fuzzing toolset

byob

BYOB (Build Your Own Botnet)

cheatsheet-god

Penetration Testing / OSCP Biggest Reference Bank

conformer

Password Guessing for different Web Portals

crunchrat

HTTPS-based Remote Administration Tool (RAT)

detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

digispark-usbkey-board

Digispark attiny85 USB key "rubber ducky" clone.

dll_to_exe

Converts a DLL into EXE

dnlib-metamorphic-code-exemple

Using dnlib to make Metmorphic code in C# in less than 100 lines

dns2proxy

Offensive DNS server

dnscat2

dropboxc2c

DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.

edm

Encima De la Mosca HTTP proxy POC for infecting files on-the-fly and SSLstrip2

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, alowing to bypass 2-factor authentication.

fcl

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

gyoithon

GyoiThon is a growing penetration test tool using Machine Learning.

htran

HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.

invoke-psimage

Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

koadic

Koadic C3 COM Command & Control - JScript RAT

leak-ntlm-hash-via-html

List of HTML tags for leaking NTLM-hashes

machine_learning_security

Source code about machine learning and security.

oscp_notes

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

social-engineering-payloads

Collection of social engineering payloads

subtee-gits-backups

subTee gists code backups

telegram-export

Export Telegram chat data and history

tinynuke

zeus-style banking trojan