Pinned Repositories
AlanFramework
A C2 post-exploitation framework
awesome-password-spraying
Everything and anything related to password spraying
BentoML
The easiest way to serve AI/ML models in production - Build Model Inference Service, LLM APIs, Multi-model Inference Graph/Pipelines, LLM/RAG apps, and more!
BurpSuite-Pro-Latest
BurpSuite Professional v2023 Latest with Key Loader
CVE-2024-21683-RCE
CVE-2024-21683 Confluence Post Auth RCE
DarkGPT
DarkGPT is an OSINT assistant based on GPT-4-200K (recommended use) designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes.
Dosinator
DoSinator is a powerful Denial of Service (DoS) testing tool developed in Python.
RDPCredentialStealer
RDPCredentialStealer it's a malware that steal credentials provided by users in RDP using API Hooking with Detours in C++
ShadowByte-Botnet
Complete Botnet Infrastucture with Malicious C&C Server And Malware Agents to infect Windows OS
Tobey123's Repositories
Tobey123/100-redteam-projects
Projects for security students
Tobey123/ALPHA
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
Tobey123/APT-Attack-Simulation-1
This repository is a compilation of all APT simulations that target many vital sectors,both private and governmental. The simulation includes written tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and many other tools that attackers might have used in actual attacks. These tools and TTPs are simulated here.
Tobey123/bbot
A recursive internet scanner for hackers.
Tobey123/captcha-killer-modified
captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite
Tobey123/CheckUACBypass
CheckUACBypass.ps1 is a PowerShell script designed to test if certain executables can be used to bypass User Account Control (UAC) on Windows systems. The script modifies the registry to temporarily redirect the execution of specified programs to a user-defined executable, attempting to gain elevated privileges.
Tobey123/ChromeKatz
Dump cookies and credentials directly from Chrome/Edge process memory
Tobey123/CVE-2024-26230
LPE of CVE-2024-26230
Tobey123/CVE-2024-36991
POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.
Tobey123/CVE-2024-43044-jenkins
Exploit for the vulnerability CVE-2024-43044 in Jenkins
Tobey123/GhostStrike
Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations.
Tobey123/Graphpython
Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit
Tobey123/KRYPT0S-Ransomware_POC
KRYPTOS is a sophisticated Python-based ransomware proof of concept (POC) designed for educational purposes. It encrypts files on Windows machines, focusing on persistence and stealth. Additionally, it includes a fake ransomware screen resembling WannaCry, with all information being fictional.
Tobey123/LazyXss
Automation tool to testing and confirm the xss vulnerability.
Tobey123/LeakedWallpaper
Leak of any user's NetNTLM hash. Fixed in KB5040434
Tobey123/leedl-tutorial
《李宏毅深度学习教程》（李宏毅老师推荐👍，苹果书🍎），PDF下载地址：https://github.com/datawhalechina/leedl-tutorial/releases
Tobey123/loghub
A large collection of system log datasets for AI-driven log analytics [ISSRE'23]
Tobey123/Malware-Analysis-Exercises
Tobey123/MyMSIAnalyzer
Analyse MSI files for vulnerabilities
Tobey123/Net-Strike
Net Strike is a powerful multi-protocol DDoS tool written in Python. It uses IP spoofing for anonymity and maximizes attack speed with multithreading and asynchronous programming.
Tobey123/NucleiFuzzer
NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications
Tobey123/OffensiveD
Utilizing DLang For Offensive Operations.
Tobey123/openbas
Open Breach and Attack Simulation Platform
Tobey123/penetration-testing-roadmap
Complete Roadmap for Penetration Testing
Tobey123/pentest
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
Tobey123/PhantomsGate
PhantomsGate: Advanced Shellcode Injection Technique
Tobey123/RustiveDump
LSASS memory dumper using only NTAPIs, creating a minimal minidump, built in Rust with no_std and independent of the C runtime (CRT). It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.
Tobey123/security-research
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
Tobey123/SQLInjector
Tobey123/URL-RequESTER