MaxCaminer's Stars
kleampa/not-paid
Client did not pay? Add opacity to the body tag and decrease it every day until their site completely fades away
r0oth3x49/ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
Notselwyn/CVE-2024-1086
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
lkarlslund/ldapnomnom
Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)
t3l3machus/PowerShell-Obfuscation-Bible
A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.
bitquark/shortscan
An IIS short filename enumeration tool
h4x0r-dz/Leaked-Credentials
how to look for Leaked Credentials !
ricardojoserf/NativeDump
Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)
trap-bytes/403jump
HTTP 403 bypass tool
nyxgeek/ntlmscan
scan for NTLM directories
KDot227/SomalifuscatorV2
Most advanced and poorly coded windows batch obfuscator ever made (aka the best)
surajpkhetani/AutoSmuggle
Utility to craft HTML or SVG smuggled files for Red Team engagements
cve-search/vulnerability-lookup
Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD).
trap-bytes/hauditor
hauditor is a tool designed to analyze the security headers returned by a web page.
fin3ss3g0d/ASPJinjaObfuscator
Heavily obfuscated ASP web shell generation tool.
ignis-sec/puff
Clientside vulnerability / reflected xss fuzzer
RikunjSindhwad/Task-Ninja
Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
Wh04m1001/GamingServiceEoP
Acebond/ReverseSocks5
Single executable reverse SOCKS5 proxy written in Golang.
thiagopeixoto/winsos-poc
A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.
wunderwuzzi23/ropci
So, you think you have MFA? AAD/ROPC/MFA bypass testing tool
akamai/Invoke-DHCPCheckup
gladstomych/AHHHZURE
AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts to brush up their cloud sec skills.
soufianetahiri/TeamsNTLMLeak
Leak NTLM via Website tab in teams via MS Office
Hagrid29/CVE-2024-2432-PaloAlto-GlobalProtect-EoP
riza/indextree
Generates the tree of the directory listing page.
nettitude/CVE-2024-25153
Proof-of-concept exploit for CVE-2024-25153.
Acceis/bqm
Deduplicate custom BloudHound queries from different datasets and merge them in one customqueries.json file.
dunderhay/entraspray
Password spraying tool for Microsoft Online accounts (Entra/Azure/O365)
Meliketoaste/MyFirefox
Some people wanted it.