Suborner: The Invisible Account Forger
A simple program to create a Windows account you will only know about :)
https://github.com/r4wd3r/Suborner

CVE-2022-34715:
Microsoft Windows NFS v4 RCE
https://www.zerodayinitiative.com/blog/2022/8/31/cve-2022-34715-more-microsoft-windows-nfs-v4-remote-code-execution

1. Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key
https://github.com/hackerhouse-opensource/MsSettingsDelegateExecute
2. UAC bypass for x64 Windows 7-11
https://github.com/zha0gongz1/iscsicpl_bypassUAC

r77-rootkit
Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
https://github.com/bytecode77/r77-rootkit

evilginx2 + gophish
https://github.com/fin3ss3g0d/evilgophish

#Malware
1. Spymax Android RAT
https://insinuator.net/2022/09/spymax-the-android-rat-and-it-works-like-that
2. Play Ransomware
https://www.trendmicro.com/en_us/research/22/i/play-ransomware-s-attack-playbook-unmasks-it-as-another-hive-aff.html
3. Analyzing Obfuscated VBS with CyberChef
https://isc.sans.edu/diary/29028

Tool to automatically exploit AD privilege escalation paths shown by BloodHound
https://github.com/CravateRouge/autobloody

Default Credentials Cheat Sheet
https://github.com/ihebski/DefaultCreds-cheat-sheet

Root shell exploit for several Xiaomi routers:
4A Gigabit, 4A 100M, 4C, 3Gv2, 4Q, miWifi 3C...
https://github.com/acecilia/OpenWRTInvasion

vMass Bot
vMass Bot automates the exploitation of remote hosts by trying to find environment files (.env) in target hosts and extract tools and info insde, then the bot detects the target host CMS and tries to auto exploit and upload shell payload using the vMass vulnerability set ( 108 exploits in the current version 1.2)
https://github.com/c99tn/vMass

#Conti #sources

CVE-2022-36804:
A critical vulnerability in Atlassian Bitbucket Server/Data Center
https://github.com/CEOrbey/CVE-2022-36804-MASS-RCE

How Malicious Actors Abuse Native Linux Tools in Attacks
https://www.trendmicro.com/en_us/research/22/i/how-malicious-actors-abuse-native-linux-tools-in-their-attacks.html

Joern - Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs
https://github.com/joernio/joern

CVE-2022-37706:
A reliable exploit + write-up to elevate privileges to root (Ubuntu 22.04)
https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit

Analyzing Golang Executables
https://www.pnfsoftware.com/blog/analyzing-golang-executables

Raccoon Stealer
Malware Analysis
https://d01a.github.io/raccoon-stealer/

CVE-2022-37706:
A reliable exploit + write-up to elevate privileges to root (Ubuntu 22.04)
https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit

From Leaking TheHole to Chrome Renderer RCE
https://medium.com/numen-cyber-labs/from-leaking-thehole-to-chrome-renderer-rce-183dcb6f3078

CrackMapExec - A swiss army knife for pentesting networks
https://github.com/Porchetta-Industries/CrackMapExec