devant1

devant1's Stars

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61.9k1.8k014.8k

• microsoft/vcpkg

  C++ Library Manager for Windows, Linux, and MacOS

  Language:CMake23.5k43419k6.5k

• nccgroup/ScoutSuite

  Multi-Cloud Security Auditing Tool

  Language:Python6.8k1398771.1k

• mandiant/capa

  The FLARE team's open-source tool to identify capabilities in executable files.

  Language:Python5k821k565

• joxeankoret/diaphora

  Diaphora, the most advanced Free and Open Source program diffing tool.

  Language:Python3.7k132259375

• r4j0x00/exploits

  Language:C2.5k9610692

• matterpreter/DefenderCheck

  Identifies the bytes that Microsoft Defender flags on.

  Language:C#2.3k4320404

• sevagas/macro_pack

  macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

  Language:Python2.2k9375406

• monoxgas/sRDI

  Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

  Language:PowerShell2.2k6226462

• B-Con/crypto-algorithms

  Basic implementations of standard cryptography algorithms, like AES and SHA-1.

  Language:C1.8k8417693

• rapid7/metasploit-payloads

  Unified repository for different Metasploit Framework payloads

  Language:C1.8k206199675

• diekmann/wasm-fizzbuzz

  WebAssembly from Scratch: From FizzBuzz to DooM.

  Language:C++1.5k21466

• 0vercl0k/wtf

  wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

  Language:C++1.5k22136133

• nidem/kerberoast

  Language:Python1.4k6714315

• tyranid/oleviewdotnet

  A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container

  Language:C#1.2k5335187

• newaetech/chipwhisperer

  ChipWhisperer - the complete open-source toolchain for side-channel power analysis and glitching attacks

  Language:C1.1k62358285

• nccgroup/SocksOverRDP

  Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

  Language:C++1.1k2415169

• joshfaust/Alaris

  A protective and Low Level Shellcode Loader that defeats modern EDR systems.

  Language:C8912316141

• eladshamir/Whisker

  Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

  Language:C#822103100

• MISP/misp-warninglists

  Warning lists to inform users of MISP about potential false-positives or other information in indicators

  Language:Python5423268172

• hasherezade/transacted_hollowing

  Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

  Language:C52119474

• commial/experiments

  Expriments

  Language:Python44719380

• hfiref0x/WDExtract

  Extract Windows Defender database from vdm files and unpack it

  Language:C42614459

• WithSecureLabs/physmem2profit

  Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

  Language:C#405151372

• jfmaes/SharpZipRunner

  Executes position independent shellcode from an encrypted zip

  Language:C#30012035

• 0vercl0k/CVE-2021-24086

  Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

  Language:Python2316249

• rookuu/BOFs

  Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.

  Language:C1718125

• pietroborrello/raindrop

  This is the home of the raindrop obfuscator. It transforms program functions into obfuscated ROP chains that coexist seamlessly with the surrounding software stack and can withstand popular static and dynamic deobfuscation approaches.

  611322

• cube0x8/loadlibrary

  Porting Windows Dynamic Link Libraries to Linux

  Language:C41304

• BehroozAbbassi/VmwpMonitor

  Language:C39309