31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

aahar

adminhack

today we will hack the admin panel of the site.

alcatraz

x64 binary obfuscator

amsi-bypass

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

apktool

A tool for reverse engineering Android apk files

assembly-programs

autosneakphish

Automated evasive phishing infrastructure

awesome-hardware-and-iot-hacking

beat-the-machine

Reverse engineering basics in puzzle form

bitb-templates

Browser In The Browser (BITB) Templates

bitvisor

Bitvisor: Thin layer hypervisor

blacklotus

BlackLotus UEFI Windows Bootkit

blogs

A collection of blog post articles on JavaScript, React, GraphQL and front-end development

cain-and-abel

Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering

checkmate

payload Execution by Fake Windows SmartScreen with requires Administrator privileges & Turn off real SmartScreen Filter

crackmapexec

A swiss army knife for pentesting networks

createscript

VBScript Automation

cve-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. CVE project by @Sn0wAlice

cve-2018-15473

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

cve-2021-31955-poc

cve-2021-31956

cve-2022-21907-vulnerability-poc

CVE-2022-21907 Vulnerability PoC

cve-2022-39952

POC for CVE-2022-39952

cve-2023-36745

cve-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator

cve-2024-3400

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

dt

DeviceTree

edr-hooks