ch-rigu Goto Github PK

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsiscanbufferbypass

Bypass AMSI by patching AmsiScanBuffer

betacreator

BetaCreator is a free tool for the creation of rock climbing route guides/beta photos.

blacklist3r

project-blacklist3r

burpsuite-team-extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!

burpsuiteteamserver

This is the Go Server that relays all HTTP requests and responses between clients.

cupp

Common User Passwords Profiler (CUPP)

cve-2018-8420

原PoC甚至符号都打错了！太不走心了！

cve-2019-5786

FileReader Exploit

cve-2020-0618

SQL Server Reporting Services(CVE-2020-0618)中的RCE

cve-2020-11547--prtg-network-monitor-information-disclosure

cve-2022-29072

7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.

cve-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator

cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

cve-2024-23897

CVE-2024-23897

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

dllnotificationinjection

A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

dns-reverse-proxy

DNS Reverse Proxy

egesploit

EGESPLOIT is a golang library for malware development

epplus

EPPlus-Excel spreadsheets for .NET

exploits_scripts

my mini collection of exploits and scripts for pentest

fuzzdb

Automatically exported from code.google.com/p/fuzzdb

gantt

Open Source Javascript Gantt

gc2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

ghosttunnel

GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.

ghosttunnel-go

Golang version of Ghost Tunnel, or called WiFi Covert Channel

go-runpe

execute a PE in the address space of another PE aka process hollowing

hey

HTTP load generator, ApacheBench (ab) replacement, formerly known as rakyll/boom

internalallthethings

Active Directory and Internal Pentest Cheatsheets

killer

Is a tool created to evade AVs and EDRs or security tools.