icheernoom

icheernoom's Stars

• anderspitman/awesome-tunneling

  List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

  13.8k18181678

• SpiderLabs/Responder

  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

  Language:Python4.4k2771081.6k

• NetSPI/MicroBurst

  A collection of scripts for assessing Microsoft Azure security

  Language:PowerShell1.9k5722306

• HuskyDG/magisk-files

  1.7k1312769

• lasting-yang/frida_dump

  frida dump dex, frida dump so

  Language:JavaScript1.4k2915442

• newbit1/rootAVD

  Script to root AVDs running with QEMU Emulator from Android Studio

  Language:Shell1.3k1687166

• broamski/aws-mfa

  Manage AWS MFA Security Credentials

  Language:Python1k1842162

• anestisb/vdexExtractor

  Tool to decompile & extract Android Dex bytecode from Vdex files

  Language:C9874275212

• Marshall-Hallenbeck/red_team_attack_lab

  Red Team Attack Lab for TTP testing & research

  Language:PowerShell53520275

• foundryzero/binder-trace

  Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

  Language:Python500202146

• Yamato-Security/EnableWindowsLogSettings

  Documentation and scripts to properly enable Windows event logs.

  Language:Batchfile48711648

• p0dalirius/windows-coerced-authentication-methods

  A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

  Language:Python46810257

• Paradoxis/Flask-Unsign

  Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

  Language:Python44051142

• kavika13/RemCom

  Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)

  Language:C++331292994

• NetSPI/ESC

  Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

  Language:C#27110242

• duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

  CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator

  2673141

• SpecterOps/presentations

  SpecterOps Presentations

  15847133

• freeload101/Java-Android-Magisk-Burp-Objection-Root-Emulator-Easy

  Java Android Magisk Burp Objection Root Emulator Easy (JAMBOREE)

  Language:PowerShell15496220

• SikretaLabs/BlueMap

  A Azure Exploitation Toolkit for Red Team & Pentesters

  Language:Python1474024

• salesforce/metabadger

  Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

  Language:Python1367614

• KiFilterFiberContext/promon-reversal

  Analysis and proof-of-concept bypass of Promon SHIELD's Android application protection

  Language:C++853120

• CobblePot59/ADcheck

  Language:Python7311

• bassammaged/awsEnum

  Enumerate AWS cloud resources based on provided credential

  Language:Python51507

• freeload101/Bloodhound-Portable

  Bloodhound Portable for Windows

  Language:Batchfile50434

• yohanes/zygisk-reflutter

  Zygisk-based reFlutter

  Language:Java452010

• Paradoxis/Flask-Unsign-Wordlist

  The following package is the standalone wordlist-only component to flask-unsign.

  Language:Python343412

• hackcatml/mldecrypt

  iOS binary memory dump tool for iOS15+ (rootful, rootless)

  Language:Swift20116

• bouj33boy/Domain-Persistence-Detection-Triage-and-Recovery-SO-CON-2024

  Resources Links for the Research Based on Josh Prager and Nico Shyne's

  11

• m4fn3/frida-ios-dump-remote

  pull decrypted ipa from remote jailbreak device

  Language:JavaScript60

• julio-cfa/vBankAPI

  vBankAPI is an API that was designed to be vulnerable.

  Language:Python2