tree-chtsec

BlogEngine.NET

Multi-User ASP.NET Blogging Application

burp-python-plugins

burp-sourcemap-finder-plugin

Chisel-Strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

DcRat

A simple remote tool written in C#. 一个简单的c#远控

docker-javafx

Docker image with javafx

osep-tools

oswe-tools

tree-chtsec/oswe-tools

tree-chtsec/osep-tools

tree-chtsec/burp-sourcemap-finder-plugin

tree-chtsec/burp-python-plugins

tree-chtsec/BlogEngine.NET

Multi-User ASP.NET Blogging Application

tree-chtsec/Chisel-Strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

tree-chtsec/DcRat

A simple remote tool written in C#. 一个简单的c#远控

tree-chtsec/docker-javafx

Docker image with javafx

tree-chtsec/DotNetToJScript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

tree-chtsec/fastjson-blacklist

tree-chtsec/firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities

tree-chtsec/GWTMap

tree-chtsec/Havoc

The Havoc Framework.

tree-chtsec/house

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

tree-chtsec/JavaApplet

These are from Offensive Security. This is for study Client-Side Attack with JavaApplet. A good example of a client side exploit based on a human vulnerability, as opposed to a software vulnerability, is the JavaApplet client side attack. This attack affects targets with Java installed and enabled in their browsers – a required feature for many administrators and power users. As JavaLenabled browsers can run Java applications, it is quite trivial to make our own malicious Java applet which will execute code of our choosing when run. However, there is one drawback: the user will get a warning box before execution of our Java payload. The average user may not understand the implications of clicking Run on this warning box. If the user runs the program, the Java software installed on the victim’s machine will execute our payload happily.!! The Java code below will download a given executable and execute it in a temporary directory on the target machine. But, you need to edit IP address in the program

tree-chtsec/MicroBackdoor

Small and convenient C2 tool for Windows targets

tree-chtsec/MiniDump

C# Lsass parser

tree-chtsec/mitre_attack_csv

MITRE ATT&CK in CSV form

tree-chtsec/python-fortify

Read and write Fortify Project (FPR) files in Python

tree-chtsec/rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

tree-chtsec/SharpAgent

C# havoc implant

tree-chtsec/SharpShooter

Payload Generation Framework

tree-chtsec/sqlmap

Automatic SQL injection and database takeover tool

tree-chtsec/Vulnerable-OAuth-2.0-Applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.