threatpointer Goto Github PK

ace-firefist

Attack chain emulator. Write recipes for initial access easily

comproxy

PoC for proxying COM objects when hijacking

csharpsc

C# Secure Coding Demos and Exercises

dotnet-api-demo

Included aditional API for HTTP/2

ffw

A fuzzing framework for network servers

gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

hunter

(l)user hunter using WinAPI calls only

iofuzz

A mutation based user mode (ring3) dumb in-memory IOCTL Fuzzer/Logger. This script attach it self to any given process and hooks DeviceIoControl!Kernel32 API and try to log or fuzz all I/O Control code I/O Buffer pointer, I/O buffer length that process sends to any Kernel driver.

malwaredevtalk

mptcp-scapy

MPTCP firewall tester based on scapy

msfontsfuzz

OpenType font file format fuzzer for Windows

ndis

Windows Kernel Driver - Create a driver device in intermediate layer of Windows kernel based on NDIS, which communicates with and connect upper layer (user mode applications) and lower layer (miniport driver/network card). Create self-defined protocols for transmitting data and control communications by simulating very simple HTTP, TCP and ARP protocols. Try best to implement connection establishing mechanism and retry sending mechanism following TCP’s specification in order to achieve stable data transmission. So it can walk around system TCP protocol layer and firewall to capture and send custom data packets.

offensive-scripts

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

responder

Responder is a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

sourcewolf

Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥

tcpdump-crashes

Crashes found on fuzzing tcpdump 4.6.2

tdl

Driver loader for bypassing Windows x64 Driver Signature Enforcement

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

windows-itpro-docs

This repository is used for Windows client for IT Pro content on Microsoft Learn.

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

ysoserial.net

Deserialization payload generator for a variety of .NET formatters