HackGit

​​CVE-2022-34960 Abusing container mount points on MikroTik's RouterOS https://nns.ee/blog/2022/08/05/routeros-container-rce.html

​​CVE-2022-26726 MacOS TCC Bypass https://github.com/acheong08/CVE-2022-26726-POC

​​SecLists Collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads. https://github.com/danielmiessler/SecLists

​​NTLM Challenger ntlm_challenger will send a NTLM negotiate message to a provided HTTP, SMB or MSSQL endpoint that accepts NTLM authentication, parse the challenge message, and print information received from the server. https://github.com/nopfor/ntlm_challenger

​​Rolling_Code_Bypass Manual scripts to recover modern cars implementing rolling code algorithms >:) https://github.com/0x5c4r3/Rolling_Code_Bypass To follow the path I used, visit the following URL: https://labs.jumpsec.com/car-hacking-manual-bypass-of-modern-rolling-code-implementations/

​​Havoc A modern and malleable post-exploitation command and control framework Features: Client ▫️ Modern, dark theme based on Dracula Teamserver ▫️ Multiplayer ▫️ Payload generation (exe/shellcode/dll) ▫️ HTTP/HTTPS listeners ▫️ Customizable C2 profiles ▫️ External C2 Demon ▫️ Sleep Obfuscation via Ekko or FOLIAGE ▫️ x64 return address spoofing ▫️ Indirect Syscalls for Nt* APIs ▫️ SMB support ▫️ Token vault ▫️ Variety of built-in post-exploitation commands https://github.com/HavocFramework/Havoc

​​PyHmmm This is a third party agent for Havoc C2 written in python. It is intended to be a basic PoC used to learn how to write custom Havoc agents, with its accompanying blog post https://github.com/CodeXTF2/PyHmmm

​​ATP-PowerShell-Scripts Have a look at all the signed PowerShell scripts located in C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection Some of these can execute code and do all kind of interesting stuff. https://github.com/Mr-Un1k0d3r/ATP-PowerShell-Scripts #ps #signed #redteam

​​whatportis It's a common task to search the default port number of a service. Some ports are available in the /etc/services file, but the list is not complete and this solution is not portable. https://github.com/ncrocfer/whatportis

​​FileLessRemoteShellcode Run Fileless Remote Shellcode directly in memory with Module Unhooking , Module Stomping, No New Thread. This repository contains the TeamServer and the Stager. https://github.com/D1rkMtr/FileLessRemoteShellcode

​​0dayex-checker Zeroday Microsoft Exchange Server checker (Virtual Patching checker) https://github.com/VNCERT-CC/0dayex-checker New attack campaign utilized a new 0-day rce vulnerability on microsoft exchange server: https://gteltsc.vn/blog/warning-new-attack-campaign-utilized-a-new-0day-rce-vulnerability-on-microsoft-exchange-server-12715.html #owa #cve

​​Messenger-Forensics Forensic Analysis of Instant Messengers: Decrypt Signal, Wickr, and Threema https://github.com/hunjison/Messenger-Forensics

​​UP HTTP Server Really simple wrapper around Flask / Waitress, dropping in as a replacement for the classic "python3 -m http.server". Useful for security testing ¯(ツ)/¯ This tool has a couple of advantages over the simple version: ▫️ Optionally show request headers -- useful for debugging or if you're looking for connections back from a target webserver ▫️ Pretty colours to differentiate requests (can be disabled with --accessible or -c/--no-colour) ▫️ Disable file-sharing (this increases security if you're only wanting connection info -- will respond with 404 to every request) ▫️ Display information about the working environment (e.g. network addresses, current directory, files being served, etc) at start and whenever you press enter https://github.com/MuirlandOracle/up-http-tool

​​Sublist3r A python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing, Baidu and Ask. Sublist3r also enumerates subdomains using Netcraft, Virustotal, ThreatCrowd, DNSdumpster and ReverseDNS. https://github.com/aboul3la/Sublist3r

GodGenesis God Genesis is a C2 server purely coded in Python3 created to help Red Teamers and Penetration Testers. Currently It only supports TCP reverse shell but wait a min, its a FUD and can give u admin shell from any targeted WINDOWS Machine. https://github.com/SaumyajeetDas/GodGenesis

​​Nginxpwner A simple tool to look for common Nginx misconfigurations and vulnerabilities. https://github.com/stark0de/nginxpwner

​​RootSec Archive DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers). https://github.com/R00tS3c/DDOS-RootSec