materaj2

Advanced-Process-Injection-Workshop

awesome_post_exploitation

List of windows post exploitation

BLE-Hack

Awesome BLE Hack repository

gen_accesslog

Python script for generate log that mix normal requests and attack requests.

havoc-docker

Docker for Havoc C2

Re2Pcap

Real_Issue

Example vulnerabilities in real scenario and some resource

sample-pentest-report

sample pentest report

setup_binary_lab_with_tcpserver

Setup binary lab with TCPServer for CTF

volatility_command

List of Volatility Command

materaj2/workshop-reverse-engineering

materaj2/Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

materaj2/CVE-2018-8639-exp

materaj2/ntopng

Web-based Traffic and Security Network Traffic Monitoring

materaj2/metasploit-modules

Collection of Metasploit modules

materaj2/wesng

Windows Exploit Suggester - Next Generation

materaj2/snmpwn

An SNMPv3 User Enumerator and Attack tool

materaj2/splunk_exploit

List for exploit splunk

materaj2/yara

The pattern matching swiss knife

materaj2/exploits

Some of my exploits.

materaj2/Awesome-WAF

🔥 A curated list of awesome web-app firewall (WAF) stuff.

materaj2/peda

PEDA - Python Exploit Development Assistance for GDB

materaj2/vulnado

Purposely vulnerable Java application to help lead secure coding workshops

materaj2/acefile

POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/

materaj2/virtual-reality

Stealthy backdoor for Windows operating systems

materaj2/Awesome-Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

materaj2/CVE-2019-6440

CVE-2019-6440. Zemana RCE and privilege escalation.

materaj2/CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

materaj2/RedTeam-Pentest-Cheatsheets

Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...

materaj2/LFI_Payload

List of local file inclusion payload

materaj2/Gorsair

Gorsair hacks its way into remote docker containers that expose their APIs.

materaj2/FACT_core

Firmware Analysis and Comparison Tool

materaj2/Invoke-Clipboard

All of Your Copy/Paste Belong to Us: Stealing the clipboard and using it for C2 communications

materaj2/awesome-serverless-security

A curated list of awesome serverless security resources

materaj2/MR

Mobile Revelator

materaj2/juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

materaj2/pwndb

Search for leaked credentials

materaj2/pown-recon

A powerful target reconnaissance framework powered by graph theory.

materaj2/websocketd

Turn any program that uses STDIN/STDOUT into a WebSocket server. Like inetd, but for WebSockets.

materaj2/elf_analysis

Perform Static and dynamic analysis on 32 bit ELF binary, and automate the process of stack based overflow exploitation.