manisheretostay Goto Github PK

angr

A powerful and user-friendly binary analysis platform!

cartp-scripts

Random scripts that I used in the CARTP course lab & final exam.

clfs-docs

Unofficial Common Log File System (CLFS) Documentation

cve-2022-37969

Windows LPE exploit for CVE-2022-37969

ewptx-preparation

fugio

FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

getsymbol

Simple tool to download debugging symbols from Microsoft, Google, Mozilla and Citrix symbol servers for reverse engineers compatible with Windows 8.1, 10 and 11

gitleaks

Protect and discover secrets using Gitleaks 🔑

javaunserializeexploits

jiraya

JIRA"YA is a vulnerability analyzer for JIRA instances. It runs active scans to identify vulnerabilities by interacting with the host and conducting tests.

jwt-secrets

maat

Open-source symbolic execution framework: https://maat.re

manticore

Symbolic execution tool

offensivedlr

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

onesixtyone

Fast SNMP Scanner

padbuster

Automated script for performing Padding Oracle attacks

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pingback.transfer

Use WordPress pingback.ping to transfer files.

prowler

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

ransomlord

RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware pre-encryption.

remote-method-guesser

Java RMI Vulnerability Scanner

samplehtml

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharpchromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

turbodiff

walk_webassembly_lure_krafter

A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims at aiding with initial access during red teams and phishing exercises leveraging WASM smuggling techniques.

windows_lpe_afd_cve-2023-21768

LPE exploit for CVE-2023-21768

xxeserve

XXE Out of Band Server.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.