secforce Goto Github PK

aws-cognito-finder

AWS Cognito Finder Burp Suite Extension

awsome-cis-checker

azdetect

beacon2023

Slides from Beacon 2023 Conference

chrome-stale-pointer-poc

css_exfiltration

cve-2008-1613

RedDot CMS versions 7.5 Build 7.5.0.48 and below full database enumeration exploit that takes advantage of a remote SQL injection vulnerability in ioRD.asp.

cve-2008-5416

Microsoft SQL Server sp_replwritetovarbin Memory Corruption via SQL Injection

cve-2011-3368

CVE-2011-3368 exploit code

cve-2011-4107

phpMyAdmin 3.3.X and 3.4.X - Local File Inclusion

cve-2017-3599

Proof of concept exploit for CVE-2017-3599

cve-2018-1000082-exploit

cve-2018-8941

D-Link DSL-3782 Code Execution (Proof of Concept)

cve-2021-37748

dll-hollow-poc

DLL Hollowing PoC - Remote and Self shellcode injection

fixer

FIX (Financial Information eXchange) protocol fuzzer

macro-keystrokes

PoC of execution of commands on a Word macro, without the use of rundll32.exe and importation of kernel32 libraries such as CreateRemoteThread or CreateProcessA. This technique simply relies on sending keystrokes to the host.

netscalerepabypass

A quick and dirty way to bypass encrypted EPA to connect to a NetScaler Gateway

nimwhispers

progress-moveit-transfer-2020.1-stored-xss-cve-2020-28647

MOVEit Transfer 2020 web application Stored Cross-Site Scripting (XSS)

proxyfuzz

secforce.github.io

Blog content (BETA)

sftp-exploit

OpenSSH <=6.6 SFTP misconfiguration universal exploit

sharpallowedtoact

Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)

sharpasm

SharpASM is a C# project that aims to automate ASM (i.e. shellcode) execution in .NET programs by exploiting code caves in RWX sections allocated by the CLR.

sharpextractor

SharpExtractor is a dotnet project that allows file extraction from file containers.

sharpwhispers

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.

sharpzip

snmp-brute

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

sparta

Network Infrastructure Penetration Testing Tool