sudonap Goto Github PK

apt_report

Interesting APT Report Collection And Some Special IOC

autosmuggle

Utility to craft HTML smuggled files for Red Team engagements

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

bucketloot

BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

cisco-ios-xe-scanner

CVE-2023-20198 & 0Day Implant Scanner

coercedpotato

curlshell

reverse shell using curl

cve-2019-0232

Apache Tomcat Remote Code Execution on Windows - CGI-BIN

cve-2019-0604

cve-2019-0604 SharePoint RCE exploit

cve-2023-22515

CVE-2023-22515: Confluence Broken Access Control Exploit

cve-2023-29357

Microsoft SharePoint Server Elevation of Privilege Vulnerability

cve-2023-36745

cve-2023-46747-rce

exploit for cve-2023-46747

gc2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

ghidra

Ghidra is a software reverse engineering (SRE) framework

hacker

Hacker is a Jekyll theme for GitHub Pages

htmlsmuggling

HTML smuggling is a malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page. The malicious script decodes and deploys the payload on the targeted device when the victim opens/clicks the HTML attachment/link. The HTML smuggling technique leverages legitimate HTML5 and JavaS

htshells

Self contained htaccess shells and attacks

ioctlhunter

jira-lens

Fast and customizable vulnerability scanner For JIRA written in Python

mailto_analyzer

PoC analyzer of your email address exposure on various services

netlas-cookbook

The goal of this guide is very simple - to teach anyone interested in cyber security, regardless of their knowledge level, how to make the most of Netlas.io.

nightshadeantidote

An 'antidote' to the recently released AI poison pill project known as Nightshade.

poc-for-cve-2023-41993

shucknt

ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard (DES).

smshell

PoC for a SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers

sparty-2.0

An MS Sharepoint and Frontpage Auditing Tool

sudonap.github.io

vt-stealer

VirusTotal Stealer is a DATA Exfiltration tool that exfitrate office documents and tunnel them over VirusTotal API to the Team Server

wordlists

Real-world infosec wordlists, updated regularly