djayagit Goto Github PK

awesome-red-team-operations

benevolentloader

Shellcode loader using direct syscalls via Hell's Gate and payload encryption.

bluespy

PoC to record audio from a Bluetooth device

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

ccmpwn

cve-2024-26229-exploit

Windows LPE

cve-2024-27348

Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit

cve-2024-29943

A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE

cve-2024-29973

POC for CVE-2024-29973

cve-2024-30088

cve-2024-36401

POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.

cve-2024-40725-cve-2024-40898

CVE-2024-40725 and CVE-2024-40898, affecting Apache HTTP Server versions 2.4.0 through 2.4.61. These flaws pose significant risks to web servers worldwide, potentially leading to source code disclosure and server-side request forgery (SSRF) attacks.

cve-2024-4358

Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)

cve-2024-5326-poc

CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update

cve-2024-6387_check

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

dauthi

dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-factor authentication attacks. Additionally, the framework offers authentication attacks and enumeration functionality for O365 and MFA portals.

dojoloader

Generic PE loader for fast prototyping evasion techniques

edr-internals

Tools for analyzing EDR agents

edr-xdr-av-killer

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

edrprison

Leverage a legitimate driver to silence EDR

exploitgsm

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

fragtunnel

Fragtunnel is a proof-of-concept (PoC) TCP tunnel tool that you can use to tunnel your application's traffic and bypass next-generation firewalls en route to the target.

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to DM if you find some bugs :)

goredops

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

grimoire

Generate datasets of cloud audit logs for common attacks

heavenlybypassav

HeavenlyBypassAV免杀工具

kdrill

Python tool to check rootkits in Windows kernel

lifetime-amsi-etwpatch

Two in one, patch lifetime powershell console, no more etw and amsi!

lifetime-amsibypass

Lifetime AMSI bypass.

lolspoof

An interactive shell to spoof some LOLBins command line