0xjamesli Goto Github PK

acefile

POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/

awesome-mainframe-hacking

binfmt_misc

Kernel Support for miscellaneous (your favourite) exploits

bongo-cat-mver

An Bongo Cat overlay written in C++

cve-2019-11510

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

cve-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-3156

Sudo Baron Samedit Exploit

cve-2021-3560-polkit-privilege-esclation

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

discord-crash

Crash all Discord clients (desktop, mobile, browser, third party clients)

eqgrp

Mirror

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

exploit

Some kernel exploit i wrote

exploits

Miscellaneous exploit code

expressvpn-python

ExpressVPN - Python Wrapper (IP auto switch).

finger-user-enum

Username guessing tool primarily for use against the default Solaris finger service. Also supports relaying of queries through another finger server.

fingerprintjs

Browser fingerprinting library with the highest accuracy and stability.

from-zero-to-hero-in-blockchain-security-defcon30-workshop

Blockchain technology has to be one of the biggest technology innovations of the past few years. The top emerging blockchain development trends are crypto coins, NFT, Defi, and even metaverse. Nowadays, Companies are adopting blockchain technology and moving to the decentralized world. Especially smart contract technologies, which open them to a new cyberattack in a new crypto world. While technology evolves cybercriminals evolve along and we constantly hear about the theft of millions of dollars at security breaches in smart contracts everywhere.

gamepwn101

Dedicated to game pwn (aka game hacking)

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gmsadumper

Lists who can read any gMSA password blobs and parses them if the current user has access.

gov-canada-cookie-collection

A script used for collecting site cookies from all the government of Canada websites listed here: https://www.canada.ca/en/government/dept.html

gwt-3d

hack-captive-portals

Hack any Captive portal using MAC-spoofing technique

jsfuck

Write any JavaScript with 6 Characters: []()!+

linux-soft-exploit-suggester

Search Exploitable Software on Linux

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

ncalt

ncat alternative