shelld0n Goto Github PK

ad-attack-defense

Active Directory Security For Red & Blue Team

alpc-diaghub

Utilizing the ALPC Flaw in combiniation with Diagnostics Hub as found in Server 2016 and Windows 10.

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

arsenal

Cobalt Strike 3.13 Arsenal Kit

awesome-osint

List of OSINT tools and ressources (Credits to Jivoi)

cheatsheets

Cheat sheets for various projects.

ciscorv320dump

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

cminer

Cminer is a tool for enumerating the code caves in PE files.

cobaltstrike-toolset

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

cve-2019-0708

cve-2019-19033

CVE-2019-19033 description and scripts to check the vulnerability in Jalios JCMS 10 (Authentication Bypass)

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2019-19782

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

cve-2019-3396_exp

CVE-2019-3396 confluence SSTI RCE

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-11932

Double-Free BUG in WhatsApp exploit poc.

deathstar

Automate getting Domain Admin using Empire

devsecops-studio

DevSecOps Distribution - Virtual Environment to learn DevSecOps

drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

edrs

elevatekit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

how2heap

A repository for learning various heap exploitation techniques.

ldapsigncheck

Beacon Object File & C# project to check LDAP signing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

polarbearrepo

randomrepo

Repo for random stuff

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.