psechopath Goto Github PK

35c3ctf_chals

autosuid

AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges.

cerbrutus

Network brute force tool, written in Python. Faster than other existing solutions (including the main leader in the network brute force market).

cheat.sheets

cheat.sh cheat sheets repository

chopchop

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

crlfsuite

Fast CRLF injection scanning tool

cve-2020-14321

Course enrolments allowed privilege escalation from teacher role into manager role to RCE

cve-2021-27928

CVE-2021-27928 MariaDB/MySQL-'wsrep provider' 命令注入漏洞

cve-2021-40444

CVE-2021-40444 PoC

cve-2022-2588

exploit for CVE-2022-2588

cve-2022-26134

CVE-2022-26134 Confluence OGNL Injection POC

dirsearch

Web path scanner

dirtypipez-exploit

CVE-2022-0847 DirtyPipe Exploit.

docs.tryhackme.com

TryHackMe documentation site source code

fuxploider

File upload vulnerability scanner and exploitation tool.

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

hacker-scripts

Based on a true story

hivenightmare

Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

jpchat

Service created for the room JPGChat on THM

log4shell-vulnerable-app

Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

moodle_rce

nopac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

notionterm

🖥️📖 Embed reverse shell in Notion pages

ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phpbash

A semi-interactive PHP shell compressed into a single file.

ppn

Pentester's Promiscuous Notebook