f-masood Goto Github PK

365inspect

A PowerShell script that automates the security assessment of Microsoft Office 365 environments.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adaudit

Powershell script to do domain auditing automation

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

backup_dc_registry

A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

booked-scheduler-2.7.5---rce-without-msf

Exploiting Booked Scheduler 2.7.5 - RCE without MSF.

bruteforceweblogin

A dumb skeleton code made in Python2 for bruteforcing Web Login forms.

configuration

Different configurations I normally do

conti-leaks-englished

Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.

conti_202202_leak_procedures

This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.

crtp-notes

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

crtplabs

curlshell

reverse shell using curl

cve-2009-2698

CVE-2009-2698 compiled for CentOS 4.8

cve-2021-3156

Sudo Baron Samedit Exploit

cve-2021-3157

CVE-2021-3156: Sudo heap overflow exploit for Debain 10

dirtycow

Dirtycow exploit for both 32 and 64-bit

dploot

DPAPI looting remotely in Python

exploit-writing-for-oswe

Tips on how to write exploit scripts (faster!)

exploiting_stackbased_bufferoverflows

Python2 based Bufferoverflow scripts i developed while doing the Vulnhub box Netsart by Foxlox

exploitingbufferoverflowlinux

Exploiting challenges in Linux and Windows

f-masood

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

gmsadumper

Lists who can read any gMSA password blobs and parses them if the current user has access.

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

icmp-transfertools

Transfer files to and from a Windows host via ICMP in restricted network environments.

impacket

Impacket is a collection of Python classes for working with network protocols.