miko550 Goto Github PK

cve-2022-29078

vuln ejs 3.1.6 docker

cve-2022-2992

Authenticated Remote Command Execution in Gitlab via GitHub import

cve-2022-30075

Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)

cve-2022-31061

PoC for GLPI CVE-2022-31061

cve-2022-32532

Apache Shiro CVE-2022-32532

cve-2022-33891

cve-2022-33891-poc

cve-2022-34918

CVE-2022-34918 netfilter nf_tables 本地提权 POC

cve-2022-36446-webmin-software-package-updates-rce

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

cve-2022-36804-poc

Proof of Concept exploit for CVE-2022-36804 affecting BitBucket versions <8.3.1

cve-2022-36804-poc-exploit

Somewhat Reliable PoC Exploit for CVE-2022-36804 (BitBucket Critical Command Injection)

cve-2022-41352-zimbra-rce

Zimbra <9.0.0.p27 RCE

cve-2022-45025

[PoC] Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

digispark-scripts

USB Rubber Ducky type scripts written for the DigiSpark.

dircreate2system

Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting

dll4shell

Shellcode launcher for AV bypass

docker-php

Docker PHP

dynamicstealer

:key: Load & Invoke password stealer DLL and upload report to Telegram Bot

edrs

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

exploits

favhasher

Calculate Favicon Hash for Shodan

follina.py

Quick POC to replicate the 'Follina' Office RCE vulnerability for local testing purposes

get-unjlaive

Get-UnJlaive is tool which is able to reconstruct Jlaive (.NET Antivirus Evasion Tool (Exe2Bat)) to original Assembly and stub Assembly.

hackim-2019

Sources for challenges of Nullcon's HackIM 2019

hackim-2020

Sources for challenges of Nullcon's HackIM 2020

hantaemail

Use Python to send HTML email using your gmail account to multiple receiver by look into .csv file

harvis

Harvis is designed to automate your C2 Infrastructure.

htb_notes

some of my hacjthebox notes

invoke-psimage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute