tarunyenni Goto Github PK

100daysoflearning

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adpeas

Powershell tool to automate Active Directory enumeration.

advanced-process-injection-workshop

appsec

awae-preparation

This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.

betafast

Vulnerable thick client applications used as examples in the Introduction to Hacking Desktop Applications blog series

binexp

Linux Binary Exploitation

blog

bypass_windef_reverse_shell

c-sharp-port-scan

Simple C# Port Scanner (Multi-Threaded)

codecepticon

cve-2019-15107

cve-2020-10977

GitLab 12.9.0 Arbitrary File Read

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-1676

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2021-3493

Ubuntu OverlayFS Local Privesc

cyberstuff

This Script installs useful tools and stuff for pen-testing purpose.

ebook-bypassingavsbycsharp

eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)

exploits

This is a repository of exploits that helps in pentest.

fcracker

FCracker is a command line tool designed to brute force encrypted files like zip, 7z, rar, pdf etc.

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

gitlab-11.4.7-rce

POC for GitLabs Authenticated RCE in version 11.4.7 community edition

goautodial-ce-3.3-exploit-authentication-bypass-command-injection

This script exploits a SQL injection flaw in the login functionality for GoAutoDial version 3.3-1406088000 and below, and attempts to perform command injection. This also attempts to retrieve the admin user details, including the cleartext password stored in the underlying database. Command injection will be performed with root privileges. The default pre-packaged ISO builds are available from goautodial.org. Currently, the hardcoded command injection payload is an encoded reverse-tcp bash one-liner and the handler should be setup to receive it appropriately.

inceptor

Template-Driven AV/EDR Evasion Framework

invoke-obfuscation

PowerShell Obfuscator

iotsecurity101

A Curated list of IoT Security Resources

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-privilege-escalation

This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machines and CTFs with examples.