Snoopy starts off with a website that has a file read / directory traversal vulnerability. I’ll use that to read a bind DNS configuration, and leak the keys necessary to make changes to the configuration. Once that’s updated, I can direct password reset emails…

Malware persistence is a crucial aspect of cyber threats that often goes unnoticed by unsuspecting users. In the realm of cybersecurity, it refers to the ability of malicious software to establish a foothold on a targeted system, allowing it to maintain its…

EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. - SafeBreach...

The Network Execution Tool. Contribute to Pennyw0rth/NetExec development by creating an account on GitHub.

Contribute to Maldev-Academy/MaldevAcademyLdr.1 development by creating an account on GitHub.

Ansible + Vagrant + Hyper-V + Vulnerable AD 😎. Contribute to Marmeus/capsulecorp-ad-pentest-hyperv development by creating an account on GitHub.

Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them...

A collection of practices and code examples for learning all things DevOps - LearnWithTwoHeads/devops

An XSS exploitation command-line interface and payload generator. - t3l3machus/toxssin

Impacket is a collection of Python classes for working with network protocols. - GitHub - ThePorgs/impacket: Impacket is a collection of Python classes for working with network protocols.

Microsoft SharePoint Server Elevation of Privilege Vulnerability - GitHub - Chocapikk/CVE-2023-29357: Microsoft SharePoint Server Elevation of Privilege Vulnerability

OSCP Cheatsheet by Sai Sathvik. Contribute to saisathvik1/OSCP-Cheatsheet development by creating an account on GitHub.

This demo goes through a whole lot of stuff that Metasploit Framework has added and improved with the 6.3 release:
LDAP Enumeration
Kerberos Authentication
Kerberos Ticket Forging
Kerberos Debugging
ADCS

Contribute to reewardius/bbFuzzing.txt development by creating an account on GitHub.

Until recently, Richard LaTulip was one of the Secret Service’s special agents who went undercover to better understand cybercriminals.

Generate password spraying lists based on the pwdLastSet-attribute of users. - GitHub - eversinc33/CredGuess: Generate password spraying lists based on the pwdLastSet-attribute of users.

GoCrack is a management frontend for password cracking tools written in Go - GitHub - mandiant/gocrack: GoCrack is a management frontend for password cracking tools written in Go

Fuzz 401/403/404 pages for bypasses. Contribute to intrudir/BypassFuzzer development by creating an account on GitHub.