M

RamiGPT. Autonomous Privilege Escalation using AI

AWAE-Preparation. This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.

CVE-2021-23017-PoC. PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

M-Botnet. A C2 project that controls a self-propagating MS17-010 worm.

Kali-TX. Customized Kali Linux - Ansible playbook

BlueDucky. Incident Response (IR) tool to create a list of USB-Rubber-Ducky instructions.

Vulnerable-AD-Lab. Automate the build of a vulnerable AD environment.

Miner. Local Privilege Escalation Miner

Restless. A light C# implant that bypasses Windows Firewall and Defender

6-Eyed-Spider. Post-exploitation tool collects data going out and coming into the browser and makes use of it.

AutomatedHunter. Google Chrome Extension automates testing fundamental Web Problems via Chrome

Tunnel-Manager. GUI manager for network tunnels developed for Command and Control systems.

nmap-vulnerability-scan-scripts. nmap detection scripts for CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481

HackMeGPT. Vulnerable LLM Application

Nemo. A copy of my little beautiful malware I used in IRSeC 2019

Android-Tester-Panel-App. It provides configurable shortcuts to help make the pre-qual/testing process more efficient.

Quick-and-Dirty-Recon. Quick and dirty reconnaissance hacks for BB and pentesting

CVE-2024-32002. local poc for CVE-2024-32002

Bfsense. Malicious patch for Pfsense router to perform Red Team activities.

Its-ours-now. This tool backs up all downloaded files during the malware execution period and helps the dynamic malware analysis process.

Guessing-passwords-using-machine-learning. ML experiment

tlde. Fast TLD parser in Go

VeloTheHelo. A deployment and testing platform for Velociraptor's client artifacts

TorMultiplier. Creates multiple Tor sockets

Custom.DFIR.Yara.AllRules. A Velociraptor artifact for automated Thor YARA scanning

Proof-of-Concept-CSharp-Ransomware. Low-hanging fruit deployed in IRSeC 2021

CellTower. Shell

Covert-Channel-by-Exploiting-HTTP-Post. A post-exploitation script that sniffs for POST req data and covertly sends it back to the attackers server using TCP SYN ISN

NSA-CIA-Blocklist. This is the github repository for all NSA and CIA spying servers, including those revealed by Edward Snowden and other studies we conducted on the whole world's servers, enumerating those that spy on individuals and sell data to the NSA and CIA.

CVE-2017-13156. To determine if an APK is vulnerable to CVE-2017-13156

Regex-Jungle. regex.shellcode.blog

I-WILL-FIND-U-AND-I-WILL-KILL-U. Python

SharpWatchdogs. Processes used to guard Red Team property against and watch for, unwanted or unexpected blue team actions.

Rabin-Miller-Algorithm-in-Cryptography. Primality Testing with Rabin-Miller Algorithm in Cryptography

subzy. Improved version of Subzy, subdomain takeover vulnerability checker.

WindowsPlague. Windows Malware monitors and infects specific kinds of files.

QSearchSploit. Customized outputs for SearchSploit

RandMalware. RandMalware randomly selects malware and deploys it.

SOC_Tools_Dashboard. SOC Tools Dashboard: To help optimize and standardize SOC analysis

Ansible-SOS-Agents-Installation-On-Clients. To deploy Wazuh, Kolide Fleet launcher, OSquery, Winlogbeat, Rsyslog agents for Windows and Linux.

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

kali-like. Kali Linux Zsh theme