r00t-taurus Goto Github PK

aquatone

A Tool for Domain Flyovers

atlas

Quick SQLMap Tamper Suggester

beroot

Windows Privilege Escalation Tool

bluekeep

Proof of concept for CVE-2019-0708

bluekeep_cve-2019-0708_poc_to_exploit

Porting BlueKeep PoC from @Ekultek to actual exploits

cve-2017-10271

Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)

cve-2017-11882

CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

cve-2018-0802

PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)

easysystem

Quick and dirty System (Power)Shell using NamedPipe impersonation.

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

evilbts

Rogue GSM BTS For Fun And Profit

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

evilurl

Generate unicode evil domains for IDN Homograph Attack and detect them.

filterbypass

Browser's XSS Filter Bypass Cheat Sheet

flskinner

A tool to apply basic skins to FL Studio 12+ without piracy or dll replacements.

gofetch

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

google-search-api

Python based api for searching google web, images, calc, and currency conversion.

hideproc-lkm

Linux 4.9 Loadable Kernel Module to hide processes from system utilities

invoke-thehash

PowerShell Pass The Hash Utils

ipwhois

Retrieve and parse whois data for IPv4 and IPv6 addresses

jhhjhgjiti

lazagne

Credentials recovery project

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

makemeenterpriseadmin

mimidbg

PowerShell oneliner to retrieve wdigest passwords from the memory

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

modlishka

Modlishka. Reverse Proxy. Phishing NG.

morphaes

IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.

ms17-010

MS17-010

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF