tsondt Goto Github PK

advisories

security advisories

android_vuln_poc-exp

This project contains pocs and exploits for android vulneribilities

appbleed-ios

AppBleed is a Proof of Concept iOS app that can be used to display the currently installed apps on a device without being restricted by the Sandbox.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

audit-kubernetes

k8s audit repo

automatic-app-landing-page

A Jekyll theme for automatically generating and deploying landing page sites for mobile apps.

awesome-app-landing-page

Get an awesome landing page for your iOS app in less than 30 seconds

aws-sec

badkernel

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

blanket

CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.

blog

My blog

botnets

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

cansecwest2016

slide and full exploit

canvas

chrome-github-code-review

Chrome extension for code reviews on GitHub

code-glory

Decorate your code on GitHub Gist using CSS styles

cryptopals-go

My attempt to solve http://cryptopals.com/ with Go

cryptopals-javascript

cryptopals-python

My attempt to solve http://cryptopals.com/ with Python

cryptopals-ruby

My attempt to solve http://cryptopals.com/ with Ruby

css-keylogging

Chrome extension and Express server that exploits keylogging abilities of CSS.

custom-certificate-authorities

A Magisk module which adds custom certificate authorities from a pre-defined path on the Android file system to the system trust store.

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2017-11882

Proof-of-Concept exploits for CVE-2017-11882

cve-2017-11883

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

cve-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

cve-2017-8570

Proof of Concept exploit for CVE-2017-8570

cve-2017-8759

NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements

cve-2018-0802_poc

Exploit the vulnerability to execute the calculator