emanuelfc Goto Github PK

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

apkicontamperingpoc

Automatically modifies the "ic_launcher.png" icons with stripped red lines, and creates the tampered app. For the purpose of rapidly testing Android application tampering during Penetration Tests.

authorize

A Burp Extension to test Authorization and Broken Access Control!

crackmapexec

A swiss army knife for pentesting networks

cve

Gather and update all available and newest CVEs with their PoC.

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-4034

CVE-2021-4034 1day

cve-2022-21882

win32k LPE

deeplinkhijackingpoc

Create PoC Android Apps for Deep Link Hijacking.

empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

gophish

Open-Source Phishing Toolkit

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

impacket

Impacket is a collection of Python classes for working with network protocols.

inject-assembly

Execute .NET in an Existing Process

invoke-bof

Load any Beacon Object File using Powershell!

invoke-sharpcradle

Load C# Code straight to memory

invoke-sharploader

kaynldr

KaynLdr is a Reflective Loader written in C/ASM

lazagne

Credentials recovery project

metasploit-framework

Metasploit Framework

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

printnightmare

scrcpy

Display and control your Android device

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.