0xqrx

Config files for my GitHub profile.

blind_sqli_payloads

burpplugins

cheat-sheet---active-directory

This cheat sheet contains common enumeration and attack methods for Windows Active Directory with the use of powershell.

cobalt-strike

Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection

crt_sh_subdomain_fetcher

deep-live-cam

real time face swap and one-click video deepfake with only a single image (uncensored)

gophish_customization

howtohunt

Collection of methodology and test case for various web vulnerabilities.

jndimap

JNDI 注入利用工具, 支持 RMI 和 LDAP 协议, 包含多种高版本 JDK 绕过方式 | A JNDI injection exploit tool that supports RMI and LDAP protocols, including a variety of methods to bypass higher-version JDK

layeredsyscall

Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR hooks in Windows.

leakedwallpaper

Leak of any user's NetNTLM hash. Fixed in KB5040434

misconfiguration-manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

nc.exe

Netcat for windows 32/64 bit

netexec

The Network Execution Tool

netexec_spider_visualization_tool

nxcsprayer

oswe-preparation-tudo

shellcode-injection-techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

spraygen

Password list generator for password spraying - prebaked with goodies

sshpot

A simple ssh honeypot that logs usernames and passwords

vulnerabilityresearch

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!