kr0ff Goto Github PK

.dotfiles

My dotfiles from blackarch setup

adsync-dump

Dump credentials and decrypt them for active directory (mssql)

bypass-mdm

Bypass MDM Setup for MacOS, up to Sonoma 14.4.1 (23E224).

cobaltstrike4.4_cdf

cobaltstrike4.4\4.3版本破解、去除checksum8特征、bypass BeaconEye

combsearch

Retrieve information about breached accounts from "Combination Of Many Breaches" database (from proxynova.com)

csdroid

cobaltstrike手机客户端,cobaltstrike手机版,cs手机版，cobaltstrike android

ctf-notes

Everything needed for doing CTFs

cve-2019-16278

(Nhttpd) Nostromo 1.9.6 RCE due to Directory Traversal

cve-2021-44228

Log4Shell Proof of Concept (CVE-2021-44228)

cve-2023-20198-rce

CVE-2023-20198-RCE, support adding/deleting users and executing cli commands/system commands.

cve-2024-3400

Python exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation

djb2_apihasher

A djb2 string hashing program which can be used to get the hash value of the name of an NTDLL function. Can be used with Hell's Gate or any of the *Gate variants

dogwhispererhandbook

This is the "Dog Whisperer Handbook" made by @SadProcessor

fuse-exploit

Fuse HackTheBox exploit for user

gippo

Retrieve information about a given IP address from "iplocation.net"

hackthebox-writeups

HackTheBox.eu Writeups

hellokitty-ransomware-sourcecode

Hellokitty Ransomware Sourcecode leaked

iis-8-aspwebshell-

inject-python

internetshell

kentico-12-rce-via-syncserver

Kentico <=12.0.14 is vulnerable to a remote code execution via the SyncServer

kr0ff

kr0ff.github.io

Kr0ff's blog

maldevacademy-challenges

My take on the maldevacademy challenges

md54life

Instant Completion of challenge md54life

memcached-pass-bruteforcer

Simple python script to bruteforce memcached user passwords

mtpr

A simple tool to grab quickly pentest tools or similar from GitHub/Gitlab.

opennetadmin-18.1.1-remote-code-execution

OpenNetAdmin 18.1.1 is vulnerable to Remote Code Execution

panther

Shellcode loader written in C with various AV/EDR bypassing features

pasta

A PasteBin scrapper that doesnt rely on the PasteBin scrape API