Dalfox is a fast, powerful parameter analysis and XSS scanner based on a DOM parser. Other than finding XSS it also has additional features that test for sqli,ssti,open-redirects. It is capable of finding reflected, stored,

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855). - dwisiswant0/proxylo...

PayloadBox

Repository for information about 0-days exploited in-the-wild. - googleprojectzero/0days-in-the-wild

Contribute to h4x0r-dz/CVE-2021-26855 development by creating an account on GitHub.

Introduction In recent weeks, Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in a ubiquitous global attack. ProxyLogon is the name given to CVE-2021-26855, a vulnerability on Microsoft…

Metasploit Post-Exploitation Gather module for Exchange Server - sophoslabs/metasploit_gather_exchange

Over the years of penetration testing, red teaming, and teaching, I (and I’m sure a lot of others) are often asked how to get started in infosec. More specifically, how to become a pentester/…

Last update: November 3rd, 2021
Updated November 3rd, 2021: Included several fixes and actualized some techniques. Changes made to the Defender evasion, RBCD, Domain Enumeration, Rubeus, and Mimikatz sections. Fixed some whoopsies as well 🙃.
Updated June…

Read more on this initial access vector:
https://medium.com/@riffsandhacks/use-an-office-macro-to-download-and-execute-a-payload-red-team-tips-ddbc7cc1a99

The content in this video is purely for educational purposes only, the techniques shown here should…

Shadrak is a script to generate decompression bomb in various formats.

647 files

In this video walkthrough, we analyzed a pcap capture file with Wireshark looking for indicators of compromise with the Hacintor Malware---------Pcap file so...

  Introduction Dusting off a few new (old) vulns Have you ever been casually perusing the source code of the Linux kernel and thought to ...

PowerShell scripts for communicating with a remote host. - ivan-sincek/powershell-reverse-tcp

A Spectre demo written in JavaScript for Chrome 88.

In this video walkthrough, we did reverse engineering on the recent DearCry ransomware that hit Microsoft Exchange systems.
-------------------
Receive video documentation
https://www.youtube.com/channel/UCNSdU_1ehXtGclimTVckHmQ/join
----
Backup channel
…