0xlouda Goto Github PK

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

autosploit

Automated Mass Exploiter

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

bitscout

botsv1

Splunk Boss of the SOC v1 data set.

coinswapcs

Simple implementation of Bitcoin CoinSwap, client-server

ctf-tool

A curated list of Capture The Flag (CTF) frameworks, libraries, resources and softwares.

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2017-7494

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)

cve-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2018-0802_poc

Exploit the vulnerability to execute the calculator

cypher

Pythonic ransomware proof of concept.

daily-dose-of-malware

Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime tracker and c2 for Pony.

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

flare-vm

gekko

A bitcoin trading bot written in node - https://gekko.wizb.it/

gootkit-xswkit-js

http-script-generator

ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

inveigh

Inveigh is a Windows PowerShell LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

invoke-adversary

Simulating Adversary Operations

klara

Kaspersky's GReAT KLara

labs

Vulnerability Labs for security analysis

meltdown-exploit

Meltdown Exploit PoC

metasploit-framework

Metasploit Framework

nighthawkresponse

Incident Response Forensic Framework

oscp

Scripts I developed to help complete the OSCP certification.

oscp-survival-guide

Kali Linux Offensive Security Certified Professional Survival Exam Guide

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.