awsassets Goto Github PK
Type: User
Type: User
MS17-010
An EternalBlue exploit implementation in pure go
MSBuild Without MSBuild.exe
C#域渗透扫描工具,方便一键自动化、全方位的信息收集及扫描域提权漏洞。
MSDAT: Microsoft SQL Database Attacking Tool
MS-DOS Source Code 1.X and 2.0
follina
Malware sample exchange system and API intended for Anti-Virus companies and researchers.
HTML5 zero latency player for Flussonic
A golang library designed to interact with Metasploit
Python AV Evasion Tools
msgpack.org[Go] MessagePack encoding for Golang
C# port of @mattifestation Invoke-ShellcodeMSIL.ps1
LDAP library for auditing MS AD
Create Microsoft .LNK files with Go
Office 365 and Exchange Enumeration
Msmap is a Memory WebShell Generator.
A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.
A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.
Finding all things on-prem Microsoft for password spraying and enumeration.
A repository that maps commonly used attacks using MSRPC protocols to ATT&CK
Simple tool to perform bruteforce and dictionary attacks to MS-RPC services
Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OACreate stored procedure’lerinin olmadığı bir MSSQL sunucusunun “sa” hesabını ele geçirmişsek, o sisteme girmekten vaz mı geçeceğiz? Tabii ki vazgeçmememiz gerekiyor. Bu makale “sa” hesabının yakalandığı ve “xp_cmdshell”, “sp_OACreate”, “sp_OAMethod” vb. prosedürlerin hiç birinin çalışmadığı bir senaryo düşünülerek kaleme alınmıştır.
MSSQL注入提权,bypass的一些总结
mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse
Database client library, proxy for any master slave, master master structures. Lightweight, performant and auto balancing in mind.
mstsc.exe Path Traversal to RCE POC
A pure Node.js Microsoft Remote Desktop Protocol (RDP) Client
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.