s1lkys Goto Github PK

adpeas

Powershell tool to automate Active Directory enumeration.

airgeddon_fritzbox_et_captive_portal_plugin

A captive portal plugin to phish Fritz!Box network credentials

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

auto_lfi

A simple Script which tests for LFI (Local File Inclusion) via Curl

auto_steg

A simple Bash program which bruteorces JPG-Files with Steghide

auto_wpscan

A little bash script to automaticlly enumerate wordpress Users and Wordpress Vulnerabillities

bloodhoundqueries

bluekeep_cve-2019-0708_poc_to_exploit

Porting BlueKeep PoC from @Ekultek to actual exploits

certipy-docker

Certipy in Docker

colabcat

:smiley_cat: Running Hashcat on Google Colab with session backup and restore.

compile-c-to-wasm-

Compile C to Wasm and display an Image in the Browser

csharp-rev-shell

Hacky billo implementation of a encrypted windows reverse shell in C#. Nothing special but evaded CheckPoint and Windows Defender out of the Box

cve-2019-0708

CVE-2019-0708 - BlueKeep (RDP)

cve-2020-11107

This is a writeup for CVE-2020-11107 reported by Maximilian Barz

cve-2020-15906

Writeup of CVE-2020-15906

cve-2020-29254

TikiWiki 21.2 allows to edit templates without the use of a CSRF protection.

cve-2020-29669

Macally WIFISD2

cve-2021-24884

If an authenticated user who is able to edit Wordpress PHP code in any kind, clicks a malicious link, PHP code can be edited through XSS in Formidable Forms 4.09.04.

cve-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

cve-2023-30367-mremoteng-password-dumper

Original PoC for CVE-2023-30367

cvebase.com

cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vulnerabilities & PoCs

d34d_d0lph1n-exploit

Modyfied Bluekeep DOS - Obfuscated to prevent abuse

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

dc-5-boot2root-exploit

roots after it boots :D

enablealltokenprivs

enable / disable TokenPrivilege(s)

exchange

ghostcat

CVE-2020-1938 exploit

helios

An Rce Exploit through Maillog poisioning + a local file inclusion for the symfonos machine on vulnhub

instagrambot-id-converter

Program which converts converts Usernames to its IDs, also including an Instagrambot which automaticly follows and unfollows per Instagram IDs ..... Credits to linux_choice