longmdx Goto Github PK

403bypasser

adaudit

Powershell script to do domain auditing automation

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsibypasshookmanagedapi

A new AMSI Bypass technique using .NET ALI Call Hooking.

azurehunter

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

badpotato

Windows 权限提升 BadPotato

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

c2-hunter

Extract C2 Traffic

capev2

Malware Configuration And Payload Extraction

ccremote

这是一个基于gh0st远程控制的项目，使自己更深入了解远控的原理，来编写一款自己的远控(正在编写)，项目采用VS2017

chisel

A fast TCP/UDP tunnel over HTTP

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cve-2020-7961-mass

CVE-2020–7961 Mass exploit for Script Kiddies

cve-2021-28482-exchange-poc

POC from TestANull for CVE-2021-28482 on Exchange Server

cve-2022-23808

phpMyAdmin XSS

cve-2022-41352-zimbra-rce

Zimbra <9.0.0.p27 RCE

cve-2022-42475

POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon

cve-2023-20887

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

cve-2023-21839

Weblogic CVE-2023-21839 / CVE-2023-21931 / CVE-2023-21979 一键检测

cve-2023-23397

Simple PoC in PowerShell for CVE-2023-23397

cve-2023-25136

OpenSSH Pre-Auth Double Free CVE-2023-25136 POC

cve-2023-25157

CVE-2023-25157 - GeoServer SQL Injection - PoC

cve-2023-27997-poc-fortios-ssl-vpn-buffer-overflow-vulnerability-ssijz

POC FortiOS SSL-VPN buffer overflow vulnerability

cve-2023-29343

cve-2023-2982

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

cve-2023-36745

cve-2023-50164-apache-struts-rce

A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution (RCE).

demo-csv-browser

A web application that loads a CSV and enables searching through a large dataset to quickly locate data of interest. Build with React ⚛ & Python 🐍.

dnschef

DNSChef - DNS proxy for Penetration Testers and Malware Analysts