Peneter Tools

Amsi-Bypass-Powershell This repo contains some Antimalware Scan Interface (AMSI) bypass / avoidance methods i found on different Blog Posts. Most of the scripts are detected by AMSI itself. So you have to find the trigger(https://github.com/RythmStick/AMSITrigger) and change the signature at the part via variable/function renaming, string replacement or encoding and decoding at runtime. Alternatively obfuscate them via ISESteroids and or Invoke-Obfuscation to get them working. You can also take a look at blog(https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/) post about manually changing the signature to get a valid bypass again. https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell Source: https://i.blackhat.com/Asia-22/Friday-Materials/AS-22-Korkos-AMSI-and-Bypass.pdf For more and Reference : https://twitter.com/ShitSecure

JetBrains TeamCity - account takeover via CSRF in GitHub authentication (PoC) https://github.com/yuriisanin/CVE-2022-24342

BadUSB cable based on Attiny85 microcontroller. Emulating keyboard and mouse actions, payloads can be completely customized and can be highly targeted. Undetectable by firewalls, AV software (depending on payload of course) or visual inspection #redteam https://github.com/joelsernamoreno/BadUSB-Cable

It's a Docker Environment for pentesting which having all the required tool for VAPT. https://github.com/RAJANAGORI/Nightingale Tools List: https://owasp.org/www-project-nightingale/