leomatias Goto Github PK

uac-a-mola

uac-bypass-using-dll-injection

A small project to bypass UAC in windows 10/8/7 using dll injection technique

uacme

Defeating Windows User Account Control

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

usbhiddennetworks

usbninjaprofessional

USBNinja Professional. Upgraded from USBNinja.

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable PHP Interface that mimics OWASP API Top 10 scenarios in the means of Exercises.

veil

Veil 3.1.X (Check version info in Veil at runtime)

velociraptor

Digging Deeper....

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulmap

Vulmap - Web漏洞扫描和验证工具，可对Web容器、Web服务器、Web中间件以及CMS等Web程序进行漏洞扫描，并且具备漏洞利用功能。 相关测试人员可以使用vulmap检测目标是否存在特定漏洞，并且可以使用漏洞利用功能验证漏洞是否真实存在。CVE-2020-14882, CVE-2020-2555, CVE-2020-2883, S2-061, CVE-2020-13942, CVE-2020-17530

vulnerable-ad

Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab

vulnerable-api

This repository contains an example Python API that is vulnerable to several different web API attacks.

vulnlab

vulnwhisperer

Create actionable data from your Vulnerability Scans

watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

wazuh

Wazuh - The Open Source Security Platform

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

web_cache_poison

web cache poison - Top 1 web hacking technique of 2019

websheep

🐑 Websheep is an app based on a willingly vulnerable ReSTful APIs.

webshell

Webshell && Backdoor Collection

webstor

A script to quickly enumerate all websites across all of your organization's networks, store their responses, and query for known web technologies, such as those with zero-day vulnerabilities.

wesng

Windows Exploit Suggester - Next Generation

wheresmybrowser.android

Where's My Browser? Learn hacking WebViews (Android Mobile App)

whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

wifiphisher

The Rogue Access Point Framework

win32-openssh

Win32 port of OpenSSH

windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.