nickswink Goto Github PK

avengers-blog-writeup

This is a writeup for the Avengers Blog room in TryHackMe. This is a beginner room and the writeup does not display any flags, just how to get to them.

bob-1.0.1-walkthrough

covid-19-tracker

Covid-19 tracker using this api: https://covid19.mathdro.id/api

cve-2021-32682

elFinder Commands Injection (CVE-2021-32682)

cve-2023-38646

CVE-2023-38646 Unauthenticated RCE vulnerability in Metabase

d-link-nas-devices-unauthenticated-rce

UNTESTED exploit script for CVE-2024-3272 + CVE-2024-3273. The script exploits a backdoor authentication bypass + arbitrary command injection vulnerability.

dogcat-writeup

A writeup for the dogcat room on tryhackme.

elevate-system-trusted-bof

exmatter

A mock of the Exmatter data exfiltration tool for Adversary Emulation. Build in .NET Framework. Intended to be used with 'execute-assembly'.

exportdumper

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.

flask-socketio-demo

Flask-SocketIO Demo

jargon

magicfights

POC for hiding shellcode data inside valid MP4 files on disk.

magicfightsloaderc

A POC shellcode loader that searches for shellcode hidden in MP4 files.

mc-payload-mod

A proof of concept minecraft mod that executes a command on the host system.

newegg-web-scraper-api

an API to scrape a few pieces of data from amazon product pages for Christmas List React App

nickswink

Config files for my GitHub profile.

ninja_uuid_runner

Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!

previse-notes-walkthrough

processhollowencrypted

A .NET assembly that pulls AES encrypted shellcode from Sliver C2

proxyshell-poc

retro-writeup

This is a writeup for the retro room on tryhackme.

rust-aes-loader

a rust shellcode loader for sliver

simple-bof-guide

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

stardust

A modern 64-bit position independent implant template

stealerium

FORK Stealer + Clipper + Keylogger

syswhispers

AV/EDR evasion via direct system calls.

uac-bof-bonanza

Collection of UAC Bypass Techniques Weaponized as BOFs