Pinned Repositories
Cisco-CVE-2020-3452-shodan-scanner
simple bash script of CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability checker
custom-yara-rules
yara rules/signatures based on MITRE ATT&CK for self-study research
F5-BIG-IP-CVE-2020-5902-shodan-scanner
simple bash script of F5 BIG-IP TMUI Vulnerability CVE-2020-5902 checker
GitLab-CVE-2021-22205-scanner
IcedID-Trickbot-traffic-analysis
This is Digital Forensic Final Project. Our team of 5 members got network forensic pcap file. We have to make analysis and investigate the nature of case. Tools we used to conduct this investigation are Wireshark and NetworkMiner.
Log4j2-CVE-2021-44228-revshell
Log4j2 CVE-2021-44228 revshell, ofc it suck!!
notes-simple-ctf-pentesting-guide
some notes i gathered online when doing pentesting ctf
notes-Simple-Guide-to-Web-Pentest
some references i made after enrolled an udemy course by Zaid Sabih (Learn Website Hacking / Penetration Testing From Scratch)
Webmin-CVE-2022-0824-revshell
Webmin <=1.984, CVE-2022-0824 Post-Auth Reverse Shell PoC
faisalfs10x's Repositories
faisalfs10x/notes-simple-ctf-pentesting-guide
some notes i gathered online when doing pentesting ctf
faisalfs10x/WiFi-Pentest-Cheat-Sheet
faisalfs10x/faisalfs10x.github.io
My InfoSec blog is at https://faisalfs10x.github.io/ || (copyright faisalfs10x.github.io)
faisalfs10x/1nv0k3-Rvb3us2
faisalfs10x/AttackDetection
Attack Detection - Suricata PT Open Ruleset
faisalfs10x/Awesome-Red-Teaming
List of Awesome Red Teaming Resources
faisalfs10x/Beginners-Guide-to-Obfuscation
faisalfs10x/Bloodhound-CustomQueries
Custom Queries - Brought Up to BH4.1 syntax
faisalfs10x/Burp-Suite-Certified-Practitioner-Exam-Study
Burp Suite Certified Practitioner Exam Study
faisalfs10x/CVE-2022-2639-PipeVersion
CVE-2022-2639 Linux kernel openvswitch local privilege escalation
faisalfs10x/CVE-2022-40684
A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
faisalfs10x/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
faisalfs10x/dirty-scripts
dirty scripts
faisalfs10x/faisalfs10x
profile
faisalfs10x/FavFreak
Making Favicon.ico based Recon Great again !
faisalfs10x/frameless-bitb
A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.
faisalfs10x/GOAD
https://mayfly277.github.io/posts/GOADv2/
faisalfs10x/HowToHunt
Tutorials and Things to Do while Hunting Vulnerability.
faisalfs10x/javascript-obfuscator
A powerful obfuscator for JavaScript and Node.js
faisalfs10x/MAAD-AF
MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Azure AD.
faisalfs10x/maldev-for-dummies
A workshop about Malware Development
faisalfs10x/mitm6
pwning IPv4 via IPv6
faisalfs10x/NTLM-leak
Just another script for checking NTLM in data breach based on NTHashes.com
faisalfs10x/Payload-Download-Cradles
This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.
faisalfs10x/php-emoji-webshell
faisalfs10x/rpidbox
kali@pi:~ sudo bash setup.sh
faisalfs10x/rules
Repository of yara rules
faisalfs10x/Sandman
Sandman is a NTP based backdoor for red team engagements in hardened networks.
faisalfs10x/v2RayVPN
（VLESS+TCP+TLS/VLESS+TCP+XTLS/VLESS+gRPC+TLS/VLESS+WS+TLS/VMess+TCP+TLS/VMess+WS+TLS/Trojan+TCP+TLS/Trojan+gRPC+TLS/Trojan+TCP+XTLS）
faisalfs10x/wmiexec-Pro
New generation of wmiexec.py