Pinned Repositories
AggressorScripts
Various Aggressor Scripts I've Created.
AQUARMOURY
My musings in C and offensive tooling
Beacon
Open Source Cobalt Strike Beacon. Unreleased, in research stages.
Beleth
Multi-threaded SSH Password Auditor
btc-address-generator
Bitcoin address generator (bech32, segwit, paper wallets, BIP39 seed, etc.)
BypassUAC
Use ICMLuaUtil to Bypass UAC!
Chimera
Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
Ciphey
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
cobaltstrike_brute
Cobalt Strike Team Server Password Brute Forcer
xkind3r's Repositories
xkind3r/AQUARMOURY
My musings in C and offensive tooling
xkind3r/Beacon
Open Source Cobalt Strike Beacon. Unreleased, in research stages.
xkind3r/btc-address-generator
Bitcoin address generator (bech32, segwit, paper wallets, BIP39 seed, etc.)
xkind3r/crackq
CrackQ: A Python Hashcat cracking queue system
xkind3r/CSSG
Cobalt Strike Shellcode Generator
xkind3r/CVE-2020-1034
PoC demonstrating the use of cve-2020-1034 for privilege escalation
xkind3r/CVE-2020-14750
PoC para las vulnerabilidades CVE-2020-14750 y cve-2020-14882
xkind3r/CVE-2020-17144-EXP
Exchange2010 authorized RCE
xkind3r/CVE-2020-17519
Apache Flink 目录遍历漏洞批量检测 (CVE-2020-17519)
xkind3r/CVE-Exploits
PoCs for public CVE's I have been working on.
xkind3r/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥
xkind3r/Depix
Recovers passwords from pixelized screenshots
xkind3r/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
xkind3r/Fully-Undetectable-Techniques
xkind3r/metasploit-framework
Metasploit Framework
xkind3r/nccfsas
Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.
xkind3r/OutlookParasite
Outlook persistence using VSTO add-ins
xkind3r/p12tool
A simple Go script to brute force or parse a password-protected PKCS#12 (PFX/P12) file.
xkind3r/Perfusion
Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)
xkind3r/poc
Proof of Concepts
xkind3r/PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual.
xkind3r/redteam_vul
红队作战中比较常遇到的一些重点系统漏洞整理。
xkind3r/s3viewer
Publicly Open Amazon AWS S3 Bucket Viewer
xkind3r/SharpLoginPrompt
xkind3r/SharpWMI
SharpWMI is a C# implementation of various WMI functionality.
xkind3r/sleuthkit
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
xkind3r/solarflare
SolarWinds Orion Account Audit / Password Dumping Utility
xkind3r/udp2raw-multiplatform
multi-platform(cross-platform) version of udp2raw-tunnel, which supports Windows/Mac/BSD natively. Client-Only at the moment.
xkind3r/udp2raw-tunnel
A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)
xkind3r/XSSTRON
Electron JS Browser To Find XSS Vulnerabilities Automatically