How to steal NTLMv2 hashes using file download vulnerability in web application | Start With Linux | Mannu Linux
http://www.mannulinux.org/2018/12/how-to-steal-ntlmv2-hashes-using-file.html?m=1

awesome-windows-kernel-security-development/README.md at master · ExpLife0011/awesome-windows-kernel-security-development · GitHub
https://github.com/ExpLife0011/awesome-windows-kernel-security-development/blob/master/README.md

GitHub - skelsec/pypykatz_agent_dn: Pypykatz agent implemented in .NET
https://github.com/skelsec/pypykatz_agent_dn

A small game that helps improve your XSS skills! It dynamically generates (increasingly more difficult) levels for you to exploit XSS vulnerabilities. No level is the same. https://t.co/bch4wIOAO4

Python for Reverse Engineering #1: ELF Binaries - DEV Community 👩‍💻👨‍💻
https://dev.to/icyphox/python-for-reverse-engineering-1-elf-binaries-1fo4

Windows DHCP Client RCE
https://labs.mwrinfosecurity.com/advisories/windows-dhcp-client/

[Research] Java Serialization Objects (JSO): An Exploitation Guide | Rapid7
https://www.rapid7.com/research/report/exploiting-jsos/

Port Forwarding in Windows | Windows OS Hub
http://woshub.com/port-forwarding-in-windows/

GitHub - Critical-Start/pastebin_scraper
https://github.com/Critical-Start/pastebin_scraper

sirdarckcat: [🌐💧💥] HTTP Cache Cross-Site Leaks
http://sirdarckcat.blogspot.com/2019/03/http-cache-cross-site-leaks.html?m=1

Fuzzilli, JavaScript engine fuzzer, is now open source: https://t.co/2noeJIATVf

Authenticated Arbitrary Command Execution on PostgreSQL 9.3 > Latest
https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5

A macOS, post-exploit, red teaming framework built with python3 and JavaScript. It's designed to provide a collaborative and user friendly interface for operators, managers, and reporting throughout mac and linux based red teaming. https://github.com/its-a-feature/Apfell

GitHub - marco-lancini/goscan: Interactive Network Scanner
https://github.com/marco-lancini/goscan

GitHub - paranoidninja/CarbonCopy: A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
https://github.com/paranoidninja/CarbonCopy

GitHub - trustedsec/social-engineer-toolkit: The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
https://github.com/TrustedSec/social-engineer-toolkit

Data Exfiltration | Azeria Labs
https://azeria-labs.com/data-exfiltration/