cvlabsio Goto Github PK

chipsec

Platform Security Assessment Framework

chrome-android-and-windows-0day-rce-sbx

Chrome Android and Windows 0day RCE+SBX.. DPRK

chrometools

A collection of tools to abuse chrome browser

chtimestamp

Changing the Creation time and the Last Written time of a dropped file by the timestamp of other one , like the "kernel32.dll" timestamp

ciaioctl

User/Kernel Mode communication using IOCTL

cis-vsphere

A tool to assess the compliance of a VMware vSphere environment against the CIS Benchmark.

clickoncehunter

Golang search engine scraper intended for identification of published ClickOnce deployments

client-gpos

GPOs for client systems

cloud-investigate

A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.

cloud-middleware-dataset

cloud-security-remediation-guides

Security Remediation Guides

clrvoyance

Managed assembly shellcode generation

codecepticon

collect-memorydump

Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR

collector

Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.

com_inject

comms_demo

A demo of Shlyuz's communciation and encryption features

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

configtemplates

Collection of configuration files that can be used as good starting points to secure different services and tools

conti-leaks-englished

Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.

cosmapper

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

cpp-implant

A simple implant showcasing modern C++

cpplumber

Static analysis tool based on clang, which detects source-to-binary information leaks in C and C++ projects

cpu-internals

Intel / AMD CPU Internals

crackmapexec

A swiss army knife for pentesting networks

creds-shitsecure

Some usefull Scripts and Executables for Pentest & Forensics

cronos

PoC for a new sleep obfuscation technique leveraging waitable timers to evade memory scanners.

cronos-rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

csirt-collect

PowerShell script to collect memory and (triage) disk forensics

customxmlpart

A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.