evtx-attack-samples

Windows Events Attack Samples

excelntdonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

exe2hex

Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell).

exe_to_dll

Converts a EXE into DLL

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

expl-bin

some of my modified exploits

exploits

Miscellaneous exploit code

exploits-1

Windows Exploits

exploits-2

Some of my exploits.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

fakelogonscreen

Fake Windows logon screen to steal passwords

faraday

Collaborative Penetration Test and Vulnerability Management Platform

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

filemanager

File manager in a single php file

fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.

finderdomaintakeover

findsploit

Find exploits in local and online databases instantly

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

fluxion

Fluxion is a remake of linset by vk496 with enhanced functionality.

flyingcarpet

Encrypted file transfer over ad hoc WiFi. No network infrastructure required, just two laptops in close range. Linux, Mac, and Windows.

foca

Tool to find metadata and hidden information in the documents.

fpmvuln

bash poc scripts to exploit open fpm ports

freddy

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

freshonions-torscraper

Fresh Onions is an open source TOR spider / hidden service onion crawler

fullpowers

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzz.txt

Potentially dangerous files

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.