omribaso Goto Github PK

arp-dns-spoof

Sample code for DNS spoofing with ARP poisoning.

besocurl

A library for HTTP / HTTPs request support SSPI and PAC file parsing(Automatic proxy settings detection)

besotoken

A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

besoware

cve-2022-22845-exploit

Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

dllicous-maliciousdll

A generator for malicious DLL files for DLL Hijacking attacks

evil_files

Evil Files Ready for testing

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

handy-scripti

handy scripts i write during PT and i think would help others

imhex

A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM.

invoke-unconstrained

jwt-master

JWT Token Decoder - Forger - And Secret Key Brute Forcer

mobile-pt-scripts

A repo by your beloved pentester for mobile pentesting scripts both for Android and iOS

msdn-code-gallery-microsoft

Samples from Microsoft teams for the MSDN Code Gallery

msfconsole-exploits-in-scripts

In this Repo I will replicate msfconsole modules to be in python.

procexp.sys_weaponized

ptoolity

Python based script used for PT / Replacing the exisiting known tools

rtoolz

A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.

socks5server

Windows C/C++ Socks5 Server

viewgen

viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

windows-privilege-escalation-cheat-sheet

Updating on a daily base.

wtsimpersonator

WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"

xss-payloads

List of advanced XSS payloads