pondim Goto Github PK

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

jiuzhou

JiuZhou is a data set of Ethereum bug smart contracts (ICSME 2020).

jpaseto

A library for creating and parsing Paseto in Java

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

katacoda-scenarios

Katacoda Scenarios

kernelbypasssharp

C# Kernel Mode Driver to read and write memory in protected processes

kerneldatastructurefinder

Driver and WinDBG scripts to dump information about all resources and lookaside lists

koronkowy

kringlecon2021

KringleCon 2021

ldap2json

The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.

letitgo

Enumerate and check domains for Azure tenants

lima

Linux virtual machines, typically on macOS, for running containerd

log4j

Yara rules to look for Log4J usage

log4j-honeypot-flask

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA's Rapid Action Force team to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

log4j-sniffer

A tool that scans archives to check for vulnerable log4j versions

log4jattacksurface

log4jpatch

Deploys an agent to fix CVE-2021-44228 (Log4j RCE vulnerability) in a running JVM process

log4shell

Operational information regarding the vulnerability in the Log4j logging library.

log4shell-iocs

A collection of intelligence about Log4Shell and its exploitation activity.

log4shell-rex

PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs

logout4shell

Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

lsasssilentprocessexit

Command line interface to dump LSASS memory to disk via SilentProcessExit

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

magic-modules

Generate Google Cloud Platform support for Terraform, Ansible, InSpec

maldroid.github.io

manifesto

PoC framework for APK obfuscation

mapcidr

Small utility program to perform multiple operations for a given subnet/CIDR ranges.

merlin

Cross-platform post-exploitation HTTP Command & Control agent written in golang

nativemessagingdebugger