bmi000 Goto Github PK

analyzer-client

Client For Trend Micro Deep Discovery Analyzer

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

bitb

Browser In The Browser (BITB) Templates

c--red-team-code

C++ code useful for red team engagements

cloakquest3r

Uncover the true IP address of websites safeguarded by Cloudflare & Others

cobaltstr4.5

Cobalt Strike 4.5 cracked version.

cve-2020-0796

Scanner for CVE-2020-0796

cve-2020-0796-scanner

CVE-2020-0796-Scanner

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

deepin-linux_reader_rce-exploit

CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that leads to Remote Command Execution via crafted docx document.

dirdar

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

dnsserver

Technitium DNS Server

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

edr-telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

functionstomping

A new shellcode injection technique. Given as C++ header or standalone Rust program.

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

impacket

Impacket is a collection of Python classes for working with network protocols.

incyber

infoooze

A OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.

installerfiletakeover

invoke-runaswithcert

A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.

itachi

Generate Samples To Showcase Sandbox Technology

java-goof

learning-edr-and-edr_evasion

I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning path for me.

log4shell-vulnerable-app

Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

marshalsec

metasploit-framework

Metasploit Framework

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

pcc_3e

Online resources for Python Crash Course, 3rd edition, from No Starch Press.