Pinned Repositories
0day-wordpress-easy-smtp
this is mass scanner 0day wordpress easy smtp
3proxy
3proxy - tiny free proxy server
abrade
A fast Web API scraper written in C++ and built on Boost ASIO
AllThingsSSRF
This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
darkarmour
Windows AV Evasion
evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
halosgate-ps
Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes
Modlishka
Modlishka. Reverse Proxy.
proxychains-windows
Windows and Cygwin port of proxychains, based on MinHook and DLL Injection
Xeexe-TopAntivirusEvasion
Undetectable & Xor encrypting with custom KEY (FUD Metasploit Rat) bypass Top Antivirus like BitDefender,Malwarebytes,Avast,ESET-NOD32,AVG,... & Automatically Add ICON and MANIFEST to excitable
idfix007's Repositories
idfix007/halosgate-ps
Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes
idfix007/Auto_Wordlists
idfix007/Azur3Alph4
Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved) position.
idfix007/BeaconEye
Hunts out CobaltStrike beacons and logs operator command output
idfix007/BOF-ForeignLsass
idfix007/BotPEASS
Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.
idfix007/Debinject
Inject malicious code into *.debs
idfix007/ffuf
Fast web fuzzer written in Go
idfix007/fluxion
Fluxion is a remake of linset by vk496 with enhanced functionality.
idfix007/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
idfix007/HOLLOW
EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode
idfix007/Huan
Encrypted PE Loader Generator
idfix007/inceptor
Template-Driven AV/EDR Evasion Framework
idfix007/Invoke-BuildAnonymousSMBServer
Use to build an anonymous SMB file server.
idfix007/ItWasAllADream
A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE
idfix007/ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
idfix007/Maltensions
Post-Exploitation methods inside any extension, Presented @DEFCON29: "Extension-Land exploits and rootkits in your browser extensions".
idfix007/Medusa
Medusa is a cross-platform C2 agent compatible with Python 2.7 and 3.8, compatible with Mythic
idfix007/MicrosoftWontFixList
A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))
idfix007/Nettacker
Automated Penetration Testing Framework
idfix007/pingcastle
PingCastle - Get Active Directory Security at 80% in 20% of the time
idfix007/RemotePotato0
Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.
idfix007/ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
idfix007/ServiceMove-BOF
New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.
idfix007/SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
idfix007/SigFlip
SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
idfix007/SourcePoint
SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
idfix007/TrustedPath-UACBypass-BOF
Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.
idfix007/urlhunter
a recon tool that allows searching on URLs that are exposed via shortener services
idfix007/WinPwn
Automation for internal Windows Penetrationtest / AD-Security