dimopouloselias Goto Github PK

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ppmap

A scanner/exploitation tool written in GO, which leverages Prototype Pollution to XSS by exploiting known gadgets.

primitives

publications

Coinspect Publications: audit reports and research.

publicreports

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

sap_eem_cve-2020-6207

PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)

sap_gw_rce_exploit

SAP Gateway RCE exploits

sap_pt

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

sapconfigservlet_rce

checks for SAP ConfigServlet Unauthenticated Remote Code Execution Vulnerability

scripts

sepm-eop

CVE-2018-18368 SEP Manager EoP Exploit

simple-s3bucket-checker

Checks if an S3 bucket exists.

simplemimikatzobfuscator

A set of commands to bypass Defender (and some other AVs)

simpleshellcodeinjector

SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.

splunkappshell

Simple Splunk Reverse Shell App

sqlmap

Automatic SQL injection and database takeover tool

stream-en

Sourcecode created during my Livestream (English)

symboliclink-testing-tools

windows-logical-eop-workshop

xhrstealer

XHR Posts cookie and body html. PHP receives the data and saves in md format with html highling.