Pentester

Hijacking GitHub runners to compromise the organization https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization

Operation Triangulation: Attacks On IPhones/iPads - Marco Preuss https://www.youtube.com/watch?v=xt6z4zExFII

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy. https://github.com/hmgle/graftcp

JS-Tap is a tool intended to help red teams attack web applications. https://trustedsec.com/blog/js-tap-mark-ii-now-with-c2-shenanigans

PowerView.py PowerView.py is an alternative for the awesome original PowerView.ps1 script. Most of the modules used in PowerView are available here ( some of the flags are changed ). Main goal is to achieve interactive session without having to repeatedly authenticate to ldap. https://github.com/aniqfakhrul/powerview.py

Mobile Malware Analysis Part 1 – Leveraging Accessibility Features to Steal Crypto Wallet https://8ksec.io/mobile-malware-analysis-part-1-crypto-wallet-stealer/

Fuzzing Android binaries using AFL++ Frida Mode https://valsamaras.medium.com/fuzzing-android-binaries-using-afl-frida-mode-57a49cf2ca43

BlackHat ASIA 2024 Slides https://github.com/onhexgroup/Conferences/tree/main/BlackHat%20ASIA%202024-Slides

SilverPotato https://decoder.cloud/2024/04/24/hello-im-your-domain-admin-and-i-want-to-authenticate-against-you/

DarkGPT is an OSINT assistant based on GPT-4-200K designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes. https://github.com/luijait/DarkGPT

evilginx3 + gophish https://github.com/fin3ss3g0d/evilgophish

CLI tool (python) for managing Cortex XDR * changing rules * restarting the XDR process * disabling the local analysis engine * inserting any python code to run https://github.com/SafeBreach-Labs/CortexVortex

Windows Admin to Kernel (KSecDD driver) https://github.com/floesen/KExecDD

LSA Whisperer is a set of tools for interacting with authentication packages using their individual message protocols. Support is currently provided for the cloudap, kerberos, msv1_0, negotiate, pku2u, and schannel packages and cloudap's AzureAD plugin. https://github.com/EvanMcBroom/lsa-whisperer

CVE-2024-21338: Windows Admin-to-Kernel LPE Windows 10 & 11 PoC: https://github.com/hakaioffsec/CVE-2024-21338 Blog: https://hakaisecurity.io/cve-2024-21338-from-admin-to-kernel-through-token-manipulation-and-windows-kernel-exploitation/research-blog/

APK downloader from few sources https://github.com/kiber-io/apkd

ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 https://github.com/YuriiCrimson/ExploitGSM

Pre-Pentest Checklist Part 1: Essential Questions to Answer Before Your Next Pentest https://www.hackerone.com/penetration-testing/pre-pentest-checklist-part1

LPE works on most Linux kernels from 5.14 to v6.6 https://github.com/Notselwyn/CVE-2024-1086