00derp Goto Github PK

html5demos

Collection of hacks and demos showing capability of HTML5 apps

htshells

Self contained htaccess shells and attacks

http3-explained

A document describing the HTTP/3 and QUIC protocols

httppwnly

"Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS

idaskins

Advanced skinning plugin for IDA Pro

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

imageexploiter

Hide JavaScript inside your GIF and BMP images

impacket

Impacket is a collection of Python classes for working with network protocols.

insecureprogramming

mirror of gera's insecure programming examples | http://community.coresecurity.com/~gera/InsecureProgramming/

intruderpayloads

A collection of Burpsuite Intruder payloads

inveigh

Inveigh is a Windows PowerShell LLMNR/NBNS spoofer with challenge/response capture over HTTP/SMB

invoke-aclpwn

invoke-psimage

Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

invoke-thehash

PowerShell Pass The Hash Utils

iprotate_burp_extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

ivre

Network recon framework.

java-deserialization-exploit

javaunserializeexploits

jetleak-testing-script

Script to test if a server is vulnerable to the JetLeak vulnerability

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

jshell

JShell - Get a JavaScript shell with XSS.

jsrat-py

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.

juice-shop

OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which encompasses the entire OWASP Top Ten and other severe security flaws.

kadabra

Kadabra is my automatic LFI Exploiter and Scanner, written in C++ and a couple extern module in Python.

kernel-exploits

Some kernel exploits

keyboardsnitch

koadic

Koadic C3 COM Command & Control - JScript RAT

krackattacks-poc-zerokey

Proof-of-concept of the KRACK attack against Linux and Android

krackattacks-test-ap-ft