xrahitel Goto Github PK

-winrar-

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

51mp3l-web-backdoor

PHP WebShell Backdoor for Access all dir/file in the Website.

7-zippostexp

Post-Exploitation script to exfiltrate 7-zip files

advancedwebhackingworkshop

Examples for Advanced Web Hacking Workshop

batch.scripts

batch script utils and examples by npocmaka -

botnet-browser-chrome

botnet browser chrome,mozilla firefox,capture card number any web site ,paypal,facebook,e-commerce ,get card number,expiration date, CVV

browser-autofill-phishing

A simple demo of phishing by abusing the browser autofill feature

browser_pwn

browser pwn, main work now

calc_poc

A repository holding Proof of Concepts for executing the calculator application via different file formats

cheeting

A simple demo of phishing by manipulating the <title> attribute in CM Browser.

cookie_crimes

Read local Chrome cookies without root or decrypting

cve-2017-10952

cve-2023-38831-rarce

An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23

datasurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Secuirty Numbers and more from text

domain-obfuscator

Make your domain weird, but still work :/

evilpdf

Embedding executable files in PDF Documents

evilreg

Hack windows shell by registery files

exploit-cve-2021-21086

hack-web-cam

Hack the webcam using simple Javascript AJAX and PHP.

js2pdfinjector

Inject a JS file into a PDF file.

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

macro-keystrokes

PoC of execution of commands on a Word macro, without the use of rundll32.exe and importation of kernel32 libraries such as CreateRemoteThread or CreateProcessA. This technique simply relies on sending keystrokes to the host.

microsoft-diagcab-rce-poc

Proof of concept about a path traversal vulnerability in Microsoft's Diagcab technology that could lead to remote code execution

ms16-032

office-phish-templates

Tricks the target into enabling content (macros) with fake messages. Once enabled, uses macros to reduce the risk of suspision from target user via verious methods.

packmypayload

A PoC that packages payloads into output containersb to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

paste-hacking

pastejacking

portable-http-server

Simple HTTP Server with Dir Listing, Explore & File Upload support

powershell

My PowerShell bag of tricks

quickjack

Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.