raystyle Goto Github PK

cheatsheets-1

Random pentest notes. Use your Ctrl-F to navigate around

check-localadminhash

Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of two of my favorite tools along with some of my own code. It utilizes Kevin Robertson's (@kevin_robertson) Invoke-TheHash project for the credential checking portion. Additionally, the script utilizes modules from PowerView by Will Schroeder (@harmj0y) and Matt Graeber (@mattifestation) to enumerate domain computers to find targets for testing admin access against.

check_if_email_exists

Check if an email address exists without sending any email.

checkedc-clang

This repo contains a version of clang that is being modified to support Checked C. Checked C is an extension to C that adds checking to detect or prevent common programming errors such as out-of-bounds memory accesses.

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cheesetools

Self-developed tools for Lateral Movement/Code Execution

cheetah

a very fast brute force webshell password tool

cheetah-gui

Cheetah GUI

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

chinesemaskreflector

使用掩码生成自定义中文用户名拼音爆破字典

chip

a simple tool to detect potential security threat in php code

chisel

A fast TCP tunnel over HTTP

chrome-sbx-db

A Collection of Chrome Sandbox Escape POCs/Exploits for learning

chrome_v8_exploit

A collection of 1days and solutions to challenges related to v8/chrome I developed

chromium-941743

Chrome v8 1Day Exploit by István Kurucsai

chunk-proxy

chunkedhttpadapter

参考《利用分块传输吊打所有WAF》修改的requests的Adapter

cii-census

Automated review of open source software projects

cimplant

C# port of WMImplant which uses either CIM or WMI to query remote systems

cisco-snmp-rce

Cisco IOS SNMP RCE PoC

ciscorv320dump

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

citadel

Collection of pentesting scripts

clang-cfi-bypass-techniques

Exploitation techniques to bypass Clang CFI when applied to Chromium

classhound

利用任意文件下载漏洞自动循环下载并反编译class文件获得网站源码

cli-phisher

A small Python script to send phishing emails from the CLI

cliramdisk

A reduced functionality cli client for the imdisk ram disk driver. To be used through a backdoor like meterpreter

cloudmalwarealarm

This project aims to search for malware and malicious files on Cloud Environments using Distributed Computing such as Hadoop

cloudwalker

CloudWalker Platform

clr-injection

Use CLR to inject all the .NET apps

clr-meterpreter

The full story of the CLR implementation of Meterpreter