miko550 Goto Github PK

jira-mobile-ssrf-exploit

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)

jlaive

.NET Antivirus Evasion Tool (Exe2Bat)

laravel-8.4.2-rce

lazzzy

laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.

mailcow-cve-2022-31245

CVE-2022-31245: RCE and domain admin privilege escalation for Mailcow

mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

mindapi

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

monomorph

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

msdt-follina

Codebase to generate an msdt-follina payload

much-assembly-required

Assembly programming game

nanodump

A crappy LSASS dumper with no ASCII art

nuclei-template-cve-2022-1388-big-ip-icontrol-rest-exposed

This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. There is no data plane exposure; this is a control plane issue only.

obfuscator

The program is designed to obfuscate the shellcode.

offensivecsharp

Collection of Offensive C# Tooling

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

opencalc

simple c# code that open calculator.exe

osed

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

paracosme

Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64.

payloadexample

example payload for remote execution

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

php-binary-bugs

PHP binary bugs advisory

powershell-suite

My musings with PowerShell

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

processinjection

This program is designed to demonstrate various process injection techniques

quasar

Remote Administration Tool for Windows

random

randy

A pre-authenticated RCE exploit for Inductive Automation Ignition

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

redteamcsharpscripts

C# Script used for Red Team