xcalibure2

xcalibure2's Stars

• vavkamil/awesome-bugbounty-tools

  A curated list of various bug bounty tools

  4.1k9015658

• devanshbatham/ParamSpider

  Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

  Language:Python2.5k3796422

• p3nt4/PowerShdll

  Run PowerShell with rundll32. Bypass software restrictions.

  Language:C#1.8k5914251

• codingo/Interlace

  Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

  Language:Python1.2k3690179

• 7etsuo/windows-api-function-cheatsheets

  A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

  87811998

• Dheerajmadhukar/karma_v2

  ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

  Language:Shell800924155

• vladko312/SSTImap

  Automatic SSTI detection tool with interactive interface

  Language:Python781132592

• Syslifters/OffSec-Reporting

  Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

  7108192

• nahamsec/nahamsec.training

  The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

  Language:PHP40627688

• ricardojoserf/TrickDump

  Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!

  Language:C#3241039

• KooroshRZ/Windows-DLL-Injector

  Some DLL Injection techniques in C++ implemented for both x86 and x64 windows OS processes

  Language:C++3228554

• synacktiv/eos

  Enemies Of Symfony - Debug mode Symfony looter

  Language:Python30781243

• brinhosa/apidetector

  APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

  Language:Python2954232

• CICADA8-Research/IHxExec

  Process injection alternative

  Language:C++2902237

• danialhalo/SqliSniper

  Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

  Language:Python2454136

• jbarone/xxelab

  A simple web app with a XXE vulnerability.

  Language:HTML2236663

• joaoviictorti/shadow-rs

  Windows Kernel Rootkit in Rust

  Language:Rust2125331

• lauritzh/domscan

  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

  Language:JavaScript21221129

• Pennyw0rth/NetExec-Lab

  Lab used for workshop and CTF

  Language:PowerShell14413

• CICADA8-Research/COMThanasia

  A set of programs for analyzing common vulnerabilities in COM

  Language:C++1191022

• CICADA8-Research/MyMSIAnalyzer

  Analyse MSI files for vulnerabilities

  Language:C#894021

• Elymaro/rootscan

  Speed up your pentest enumeration

  Language:Shell771010

• filipkarc/sqli-postgres-rce-privesc-hacking-playground

  Application with SQL Injection vulnerability and possible privilege escalation. Free vulnerable app for ethical hacking / penetration testing training.

  Language:PHP742020

• milkdevil/injectAllTheThings

  Language:C703135

• two06/CerealKiller

  .NET deserialization hunter

  Language:C#68209

• Offensive-Panda/.NET_PROFILER_DLL_LOADING

  .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit is loading a malicious DLL using Task Scheduler (MMC) to bypass UAC and getting admin privileges.

  Language:C++421011

• tuxotron/xvwa_lamp_container

  XVWA on LAMP base docker image

  Language:Shell405011

• Crowdfense/CVE-2024-21338

  Windows AppLocker Driver (appid.sys) LPE

  Language:C++321013

• a7t0fwa7/BSQLi-2.0

  reverse engineered and improved BSQLi script from Coffinxp

  Language:Python112

• Offensive-Panda/NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

  This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. Instead of hardcoded base address of Ntoskrnl.exe, I calculated it dynamically and recalulated the fields offsets

  Language:C++9103