erberkan Goto Github PK

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

apkgetinfo

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

commenttagscraper

dump-hives-bof

Dump SAM, SYSTEM and SECURITY hives under C:\ drive.

erberkan

erberkan.github.io

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload (Metasploit)

fortilogger_vuln

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

mdisec-twitch-yayinlari

https://twitch.tv/mdisec

metasploit-framework

Metasploit Framework

mobile-pentest-tool-kits

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

phant0m

Windows Event Log Killer

portbender

TCP Port Redirection Utility

pxethief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

sap-hybris-authenticated-rce

SAP Hybris Authenticated Remote Code Execution

sharpc2

Command and Control Framework written in C#.

smbghost_automateexploitation

SMBGhost (CVE-2020-0796) Automate Exploitation and Detection

sonlogger-vulns

SonLogger Vulns (CVE-2021-27963, CVE-2021-27964)

soplog_vulnerability

spoolsample

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

tcmb_gunlukkurcekme

tools

uuidregistryshellcode

Write and Hide each UUID in the char* array of UUIDS shellcode in a registry key value location as REG_SZ (the location could be different from the other), then retrieve them and assemble them in UUIDs char* array shellcode and Run it

virustotalc2

Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , and in case you don't have C2 infrastructure , now you have a free one

webdirscanner