Pre-Pentest Checklist Part 1: Essential Questions to Answer Before Your Next Pentest

https://www.hackerone.com/penetration-testing/pre-pentest-checklist-part1

ExploitGSM
Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5
https://github.com/YuriiCrimson/ExploitGSM

APK downloader from few sources
https://github.com/kiber-io/apkd

CVE-2024-21338: Windows Admin-to-Kernel LPE

Windows 10 & 11

PoC: https://github.com/hakaioffsec/CVE-2024-21338

Blog: https://hakaisecurity.io/cve-2024-21338-from-admin-to-kernel-through-token-manipulation-and-windows-kernel-exploitation/research-blog/

LSA Whisperer is a set of tools for interacting with authentication packages using their individual message protocols. Support is currently provided for the cloudap, kerberos, msv1_0, negotiate, pku2u, and schannel packages and cloudap's AzureAD plugin.
https://github.com/EvanMcBroom/lsa-whisperer

Windows Admin to Kernel (KSecDD driver)

https://github.com/floesen/KExecDD

CLI tool (python) for managing Cortex XDR
* changing rules
* restarting the XDR process
* disabling the local analysis engine
* inserting any python code to run

https://github.com/SafeBreach-Labs/CortexVortex

DarkGPT is an OSINT assistant based on GPT-4-200K designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes.

https://github.com/luijait/DarkGPT

BlackHat ASIA 2024 Slides
https://github.com/onhexgroup/Conferences/tree/main/BlackHat%20ASIA%202024-Slides

Fuzzing Android binaries using AFL++ Frida Mode

https://valsamaras.medium.com/fuzzing-android-binaries-using-afl-frida-mode-57a49cf2ca43

Mobile Malware Analysis Part 1 – Leveraging Accessibility Features to Steal Crypto Wallet

https://8ksec.io/mobile-malware-analysis-part-1-crypto-wallet-stealer/

PowerView.py

PowerView.py is an alternative for the awesome original PowerView.ps1 script. Most of the modules used in PowerView are available here ( some of the flags are changed ). Main goal is to achieve interactive session without having to repeatedly authenticate to ldap.

https://github.com/aniqfakhrul/powerview.py

JS-Tap is a tool intended to help red teams attack web applications.

https://trustedsec.com/blog/js-tap-mark-ii-now-with-c2-shenanigans

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

https://github.com/hmgle/graftcp

Operation Triangulation: Attacks On IPhones/iPads - Marco Preuss

https://www.youtube.com/watch?v=xt6z4zExFII

Hijacking GitHub runners to compromise the organization

https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization

CVE-2024-21683: Confluence Auth RCE

https://github.com/W01fh4cker/CVE-2024-21683-RCE

CVE-2024-24919: Check Point arbitrary file read (as root)

https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/

CCTV
Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in real-time for logistics or safety, redefining how we navigate our surroundings.
https://github.com/IvanGlinkin/CCTV