joeleonjr Goto Github PK

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

b2xtranslator

.NET Core library to convert Microsoft Office binary files (doc, xls and ppt) to Open XML (docx, xlsx and pptx).

blank-public

bofs

Collection of Beacon Object Files

calc_security_poc

A sample of proof of concept scripts that run Calc.exe with full source code.

clrvoyance

Managed assembly shellcode generation

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

fetters

Port of Seatbelt in F#

fsharp-shellcode

F# Implementation to spawn shellcode

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

http-garden

Differential testing and fuzzing of HTTP servers and proxies

kali_setup

Simple bash script to load useful tools / settings into a new Kali Linux box.

kiterunner

Contextual Content Discovery Tool

maliciousmacromsbuild

Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.

markdown-xss-payloads

XSS payloads for exploiting Markdown syntax

namedpipepth

Pass the Hash to a named pipe for token Impersonation

noisy-recon

A simple enumeration script for CTFs / OSCP. Very noisy. Uses nmap, gobuster, nikto and more.

sharpsqldump

内网渗透中快速获取数据库所有库名，表名，列名。具体判断后再去翻数据，节省时间。适用于mysql，mssql。

sharpyshell

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

shr3dkit

Red Team Tool Kit

slacktest

test2

trigen

Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.

unwebpack-sourcemap

Extract uncompiled, uncompressed SPA code from Webpack source maps.

veil

Veil 3.1.X (Check version info in Veil at runtime)

xxe-injection-payload-list

🎯 XML External Entity (XXE) Injection Payload List