nocomp Goto Github PK

cve-2021-22205

Pocsuite3 For CVE-2021-22205

cve-2021-22206

CVE-2021-22205& GitLab CE/EE RCE

cve-2021-26855

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

cve-2021-26855-scanner

Scanner and PoC for CVE-2021-26855

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-40444-sample

CVE-2021-40444 Sample

cve-2021-40449

My exploit for CVE-2021-40449, a Windows LPE via a UAF in win32kfull!GreResetDCInternal.

cve-2021-42292

A Zeek package to detect CVE-2021-42292, a Microsoft Excel local privilege escalation exploit.

cve-2021-42694

Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)

cve-2021-44228_scanner

Scanners for Jar files that may be vulnerable to CVE-2021-44228

cve-2022-25636

CVE-2022-25636

cve-2022-25765-pdfkit-exploit-reverse-shell

pdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765

cve-2022-26923_ad-certificate-services

The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services (AD CS) server role installed.

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

cve-2023-21768-compiled

elevation privilege

cve-exploits

PoC exploits for software vulnerabilities

cyberdoor

Automated Payload Generator Tool

cypheroth

Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.

darkgld

A tool for quickly generating fishing Trojan horse.

data-obfuscator

A tool to embed files into images

dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

deathstar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

deep-ofensive-ai

The Deepfake Offensive Toolkit

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

deepfacelive

Real-time face swap for PC streaming or video calls

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

defgen

Deface HTML Page Generator

delegationbof

dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

div-stuff

My personal repository for findings and things to remember