mokeneto Goto Github PK

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

adenum

AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos.

book

certify

Active Directory certificate abuse.

codeql-javascript-unsafe-jquery-plugin

csp_security_mistakes

Cloud service provider security mistakes

cve-2019-0708

CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7

cve-2022-22972

cve-2022-23222

CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

cve-2022-26904

User Profile Arbitrary Junction Creation Local Privilege Elevation

dirtypipe-container-breakout-poc

Container Excape PoC for CVE-2022-0847 "DirtyPipe"

dsinternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

forgecert

"Golden" certificates

forticrack

Decrypt encrypted Fortienet FortiOS firmware images

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

httpleaks

HTTPLeaks - All possible ways, a website can leak HTTP requests

library

个人书籍目录，别 fork 了，里面没有书籍文件😱

lsassy

Extract credentials from lsass remotely

msdt-follina

Codebase to generate an msdt-follina payload

nsameetingwithproxyshell

ntlmquic

POC tools for exploring SMB over QUIC protocol

python-buffered-reader-exploit

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

rubeus

Trying to tame the three-headed dog.

samples

Sample code referenced by the .NET documentation

syswhispers

AV/EDR evasion via direct system calls.