0nopnop Goto Github PK

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

dfscoerce

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

diva-android

DIVA Android - Damn Insecure and vulnerable App for Android

dns-amplification-attack

drozer

The Leading Security Assessment Framework for Android.

drupal-cve-2019-6339

Drupal remote code execution vulnerabilty

dumpert

LSASS memory dumper using direct system calls and API unhooking.

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

earlybirdinjection_csharp

Inject shellcode into process via "EarlyBird"

execremoteassembly

Execute Remote Assembly with args passing and with AMSI and ETW patching

f5-cve-2022-1388-exploit

Exploit and Check Script for CVE 2022-1388

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

gcploit

These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

go-smb2

SMB2/3 client library written in Go.

gosecretsdump

Dump ntds.dit really fast

hackthebox

Hackthebox weekly boxes writeups.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hackvault

A container repository for my public web hacks!

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

hugo-theme-docdock

Declination of @matcornic Learn theme to Hugo

ihsansencan.github.io

💀 iNotes...

insecureshop

An Intentionally designed Vulnerable Android Application built in Kotlin.

iori_loader

UUID shellcode Loader with dynamic indirect syscall implementation, syscall number/instruction get resolved dynamicaly at runtime, and the syscall number/instruction get unhooked using Halosgate technique. Function address get resolved from the PEB by offsets and comparaison by hashes

ioxidresolver

IOXIDResolver.py from AirBus Security