0x5e6 Goto Github PK

cve-2021-40444

CVE-2021-40444 PoC

cve-2022-24734

CVE-2022-24734 PoC

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

cve-2022-33679

One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html

cve-2022-37706-lpe-exploit

A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)

cve-2024-21413

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC

elite_oscp_cheatsheet

eqllib

ethical-hacking-notes

my notes

eventviewer-uacbypass

🍊 Orange Tsai EventViewer RCE

evillnk

Python GUI based tool to generate lnk files with a payload and decoy files embedded inside.

exploits

exploitsvesta

external_c2_framework

Python api for usage with cobalt strike's External C2 specification

forceadmin

⚡ Create infinite UAC prompts forcing a user to run as admin ⚡

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

getlapspassword

A LAPS dumper written using the impacket library.

gobypassav

整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。

hackingtool

ALL IN ONE Hacking Tool For Hackers

i-s00n

invoke-adenum

Automate Active Directory Enumeration using PowerView

invoke-obfuscation

PowerShell Obfuscator

juicypotatong

Another Windows Local Privilege Escalation from Service Account to System

kernel-exploit-factory

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

lateral

Port forwarding via MSRPC (445/tcp) [WIP]

leakedhandlesfinder

Leaked Windows processes handles identification tool

lfi-payload-list

LFI Payloads List coolected from github repos

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop