omair2084 Goto Github PK

afl-mruby

AFL-Fuzzer for MRuby

apcldr

Payload Loader With Evasion Features

biotime-rce-8.5.5

The exploit covers several vulnerabilities in BioTime which lead to Remote Code Execution or atleast directory traversal.

cisco-rce

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

cve-2020-14750

PoC para las vulnerabilidades CVE-2020-14750 y cve-2020-14882

cve-2021-2394

POC of CVE-2021-2394

cve-2022-26937

Windows Network File System Crash PoC

cve-2022-28219

PoC for ManageEngine ADAudit Plus CVE-2022-28219

cve-2022-47966

POC for CVE-2022-47966 affecting multiple ManageEngine products

dfscoerce

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

edrsandblast

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

misc

msmq_re

odat

ODAT: Oracle Database Attacking Tool

pachine

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

proxylogon

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

remcom_privesc

sharpimpersonation

A User Impersonation tool - via Token or Shellcode injection

vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

veeam-creds

Collection of scripts to retrieve stored passwords from Veeam Backup

veeam-ds-client

# Veeam Distribution Service Golang Client

weaponizekali.sh

Automate installation of extra pentest tools on Kali Linux

webshell

免杀webshell生成工具

ysoserial_more

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.