badguy233 Goto Github PK

cve-2022-30192

CVE-2022-30190 remediation via removal of ms-msdt from Windows registry

cve-2022-34918

CVE-2022-34918 netfilter nf_tables 本地提权 POC

cve-2022-36446-webmin-software-package-updates-rce

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

drone-hacking-tool

Drone Hacking Tool is a GUI tool that works with a USB Wifi adapter and HackRF One for hacking drones.

edrs

eggshell

iOS/macOS Remote Administration Tool

emba

EMBA - The firmware security analyzer

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

evil-winrm

The ultimate WinRM shell for hacking/pentesting

faker.js

generate massive amounts of fake data in Node.js and the browser

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

gcat

A fully featured backdoor that uses Gmail as a C&C server

gda-android-reversing-tool

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

githubtest

gitstudy

glastopf

Web Application Honeypot

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

heroinn

A cross platform C2/post-exploitation framework.

icmp-transfertools

Transfer files to and from a Windows host via ICMP in restricted network environments.

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

ingram

A tool for hacking cameras

invoke-obfuscation

PowerShell Obfuscator

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

knowledgesharing

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

lazagne

Credentials recovery project

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels