A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileg...

Extract (links/possible endpoints) from responses & filter them via decoding/sorting - arbazkiraak/LinksDumper

Some of my exploits. Contribute to cfreal/exploits development by creating an account on GitHub.

Metasploit module & Python script for CVE-2019-16405 - TheCyberGeek/CVE-2019-16405.rb

One of the main powers of Office 365 is the tight integration between all the online applications. At the same time this is a risk since those applications have access to other elements such as emails in Outlook or files on SharePoint/Onedrive. This means…

red team, blue team, penetration testing, red teaming, threat hunting, digital forensics, incident response, cyber security, IT security

This is the 8th blog out of a series of blogs I will be publishing on retired HTB machines in preparation for the OSCP. The full list of…

Some security related PowerShell scripts I developed. - GitHub - MrAnde7son/PowerShell: Some security related PowerShell scripts I developed.

How to improve NGINX performance, security, and other important things. - trimstray/nginx-admins-handbook

Collection of CSS / HTML primitives. Tricks to use as an alternative to JavaScript (exfiltration, timing, etc.)

How to use CSV injection AKA Formula injection to embed a malicous payload into to spread sheet.