nfttkcauzy Goto Github PK

cve-2024-4577-php-rce

全球首款利用PHP默认环境的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP，共享原创EXP，支持SSRF，支持绕过WAF。The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment. Sharing original exploit, supports SSRF, supports WAF bypass.

cve-2024-4577-rce-exp

cve-2024-6387-poc

32-bit PoC for CVE-2024-6387 "regreSSHion" -- mirror of the original 7etsuo/cve-2024-6387-poc

cyber-security-practice

ALL cyber-security-practice, include exploit loophole , web attack ,cryptographic, system explotation, developing tools and so on

damn-vulnerable-drone

Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking.

darkcool

DarkCool ~ Exploiter, Checker, Grabber, Searching, Bruteforce, Random, And Others Tools

ddosarmy

ddosarmy is a tool that allows you to launch a DDoS attack on IP victim address, with other machines synchronously.

ddoser-tool-cloudflare-bypass

The Best DDoS Attack Tool + Bypass Cloud Flare CDN For Priv8

debugamsi

DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.

decoder-toolkit

Conversion Tools ofc

decrypt-xwormv5.2

This project serves the purpose of decrypting encrypted settings within XClient.exe. It decrypts AES-encrypted data stored as static string variables, revealing the settings upon decryption.

deserialize-signature-vulnerability-in-bitcoin-network

In this study, we will look at the DeserializeSignature vulnerability, discovered in 2023, which allows attackers to create invalid signatures that can be accepted as valid by the Bitcoin network.

dh-based-cross-protocol-attack-on-tls

Thesis Topic: Practical Demonstration of a DH-based cross-protocol attack on TLS Protocol.

dheater

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

dimorf

Dimorf is a ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OS´s

discord-rce-exploit-poc

0day - Discord remote code execution exploit POC - May 2023

dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

dns-fender

A Proof-of-Concept tool utilizing open DNS resolvers to produce an amplification attack against web servers. Using Shodan APIs and native Linux commands, this tool is in development to cripple web servers using spoofed DNS recursive queries.

dnswatch

DNSWatch

dosbomb

dosbomb ia a dos tool that cuts off targets or surrounding infrastructure in a flood of Internet traffic

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW

dspe3ah-rat

FUD RAT written in python

eigrpwn

Tools for performing attacks on EIGRP domains

el84_injector_0.0

el84_injector_0.0 is a code injection tool for Windows environments, which utilizes hashing, custom encoding and manipulation of process memory to inject payloads into processes bypassing EDR.

elfiescanner

A C++ tool for process memory scanning & suspicious telemetry generation that attempts to detect a number of malicious techniques used by threat actors & those which have been incorporated into open-source user-mode rootkits.

enemy

enemy SSH Telnet IoT botnet

enumerating-ics-scada-devices

A compilation of scripts and scans for discovering and enumerating industrial control and SCADA devices. Utilizing open-source tools, I have compiled scans and scripts for targeting Operational Technology (OT) devices and hosts!

eternal-green

a example of windows shorcut malware dropper

eternalhushframework

EternalHush - new free open-source c2 framework

evileyes-extract