.NET Process injection in a new process with QueueUserAPC using D/invoke
https://gist.github.com/tothi/9cdd2be3b49cb42723726fd75df96471

Writing Windows Kernel Drivers for Advanced Persistence
https://v3ded.github.io/redteam/red-team-tactics-writing-windows-kernel-drivers-for-advanced-persistence-part-1

1. All in One Hacking tool For Hackers
https://github.com/Z4nzu/hackingtool
2. Tools and Techniques for Red Team/Penetration Testing
https://github.com/A-poc/RedTeam-Tools

Dimorf - ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OS´s
https://github.com/Ort0x36/Dimorf

Whole-Program Reverse Engineering with GPT-3
https://github.com/moyix/gpt-wpre

Breaking RSA with a Quantum Computer

https://www.schneier.com/blog/archives/2023/01/breaking-rsa-with-a-quantum-computer.html

OWASP Mobile Application Security Testing Guide (MASTG)
https://github.com/OWASP/owasp-mastg

Powershell scripts for post exploitation
https://github.com/ItsCyberAli/PowerMeUp

"Autonomous Penetration Testing using Reinforcement Learning"
Network Attack Simulator: https://github.com/Jjschwartz/NetworkAttackSimulator

x64 binary obfuscator that is able to obfuscate various different PE files including:
.exe
.dll
.sys

https://github.com/weak1337/Alcatraz

Systematization of attacks on the perimeter of L2/L3 network equipment. Ver. 3.0.

The OWASSRF + TabShell exploit chain
https://blog.viettelcybersecurity.com/tabshell-owassrf

OPWNAI: CYBERCRIMINALS STARTING TO USE CHATGPT
https://research.checkpoint.com/2023/opwnai-cybercriminals-starting-to-use-chatgpt/

Security Audit of Git:
CVE-2022-23521:
Truncated Allocation Leading to Out of Bounds Write Via Large Number of Attributes
CVE-2022-41903:
Out of Bounds Memory Write in Log Formatting
https://x41-dsec.de/security/research/news/2023/01/17/git-security-audit-ostif

Way Into Creating a Polymorphic Malware using ChatGPT
https://www.cyberark.com/resources/threat-research-blog/chatting-our-way-into-creating-a-polymorphic-malware

A script to automate privilege escalation with CVE-2023-22809 vulnerability
https://github.com/n3m1dotsys/CVE-2023-22809-sudoedit-privesc

qscan - Quick Network Scanner
https://github.com/0xor0ne/qscan
+ its companion command line tool qsc:
https://github.com/0xor0ne/qscan/tree/main/qsc

LinWinPwn - Active Directory Vulnerability Scanner.

Scan with the help of impacket, bloodhound, crackmapexec, ldapdomaindump, lsassy, smbmap, kerbrute, adidnsdump, and more.

#AD #scan #windows

https://github.com/lefayjey/linWinPwn

Script for automation of exploitation CVE-2023-22809 vulnerability to gain a root shell.

The script checks if the current user has access to run the sudoedit or sudo -e command for some file with root privileges. If it does it opens the sudoers file for the attacker to introduce the privilege escalation policy for the current user and get a root shell.

Linux Kernel Defence Map (v.5.13)
shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies
https://github.com/a13xp0p0v/linux-kernel-defence-map

A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions
https://github.com/machine1337/gmailc2