odomrob Goto Github PK

3pillarglobal

airspy

AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training https://www.nowsecure.com/event/advanced-frida-and-radare-a-hackers-delight/

al

Playing with AssemblyLine4

android-vts

Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

apache-ofbiz-xxe

XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

auto_settingcontent-ms

This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA downloader and embeds it in the SettingContent-ms file for you and starts Apache.

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

awesome-web-security

🐶 A curated list of Web Security materials and resources.

aws_pwn

A collection of AWS penetration testing junk

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

binwalk

Firmware Analysis Tool

boofuzz

A fork and successor of the Sulley Fuzzing Framework

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

c_time

Just some new C Code to play with

cfmxdc

:cold_sweat: ColdFusion MX Descrambler Code for installer.properties

clusterd

application server attack toolkit

clusterfuzz

Scalable fuzzing infrastructure.

cnvd-c-2019-48814

coldfusion-vulnerability-scanner

ColdFusion 7>10 Local File Disclosure [password.properties]

coldfusionpwn

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

cve-2020-0796-lpe-poc

CVE-2020-0796 Local Privilege Escalation POC

deathstar

Automate getting Domain Admin using Empire

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

egresschecker

.NET component of trustedsec's egressbuster project

empire

Empire is a PowerShell and Python post-exploitation agent.

enumerator