m0chan Goto Github PK

adblocker.io

bettersafetykatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

bugbounty

RepoToStoreBugBountyInfo

burp-highlighter

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

dnsstager

Hide your payload in DNS

h4cks

Combination of all my Resources, Links & Scripts

helpcolor

Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type

inditex

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

kubescape

Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.

letsgo

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j2-cve-2021-44228

Remote Code Injection In Log4j

log4shell-everywhere

A Burp Suite extension which augments your proxy traffic by injecting log4shell payloads into headers

m0chan.github.io

m0chan.github.io

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

next-netlify-starter

next-netlify-starter-test

nextjs-blog-theme

playing-with-npm

pwk-cheatsheet

rai

Rapid Attack Infrastructure (RAI)

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

takeover123

testrepo

trevorspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!