xkind3r Goto Github PK

aggressorscripts

Various Aggressor Scripts I've Created.

aquarmoury

My musings in C and offensive tooling

beacon

Open Source Cobalt Strike Beacon. Unreleased, in research stages.

beleth

Multi-threaded SSH Password Auditor

btc-address-generator

Bitcoin address generator (bech32, segwit, paper wallets, BIP39 seed, etc.)

bypassuac

Use ICMLuaUtil to Bypass UAC!

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

cobaltstrike_brute

Cobalt Strike Team Server Password Brute Forcer

crackq

CrackQ: A Python Hashcat cracking queue system

cssg

Cobalt Strike Shellcode Generator

cve-2019-1040-dcpwn

CVE-2019-1040 with Kerberos delegation

cve-2019-16098

Local privilege escalation PoC exploit for CVE-2019-16098

cve-2020-1034

PoC demonstrating the use of cve-2020-1034 for privilege escalation

cve-2020-14750

PoC para las vulnerabilidades CVE-2020-14750 y cve-2020-14882

cve-2020-17144-exp

Exchange2010 authorized RCE

cve-2020-17519

Apache Flink 目录遍历漏洞批量检测 (CVE-2020-17519)

cve-exploits

PoCs for public CVE's I have been working on.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

depix

Recovers passwords from pixelized screenshots

dllhijacktest

DLL and PowerShell script to assist with finding DLL hijacks

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

fully-undetectable-techniques

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

jsonbee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

metasploit-framework

Metasploit Framework

nccfsas

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

netntlmtosilverticket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

outlookparasite

Outlook persistence using VSTO add-ins

p12tool

A simple Go script to brute force or parse a password-protected PKCS#12 (PFX/P12) file.