evi1cg

Intranet_Penetration_Tips. 2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

noPac. Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

redis-rce. Redis 4.x/5.x RCE

Pentest. tools

CVE-2017-11882. CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

atexec-pro. Fileless atexec, no more need for port 445

Exchange2domain. CVE-2018-8581

cve-2020-0688. cve-2020-0688

PySQLTools. Mssql利用工具

acefile. POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/

CVE-2019-1040. CVE-2019-1040 with Exchange

Mailget. 通过脉脉用户猜测企业邮箱

owa_info. 获取Exchange信息的小工具

TorProxy. 利用Tor搭建Socks5代理，动态切换IP

RelayX. NTLM relay test.

get_ip_by_ico. 从shodan获取使用了相同favicon.ico的网站

CVE-2018-15982_EXP. exp of CVE-2018-15982

RTF_11882_0802. PoC for CVE-2018-0802 And CVE-2017-11882

CS_Chinese_support. Cobalt strike 修改支持回显中文。

MyJSRat. This is JSRat.ps1 in Python

cf_workers_proxy. Use cloudflare workers to build socks5 proxy service

AMSI_bypass. XSLT

proxyshell_payload. proxyshell payload generate

SharpAddDomainMachine. SharpAddDomainMachine

pyForgeCert. pyForgeCert is a Python equivalent of the ForgeCert.

cs_custom_404. Cobalt strike custom 404 page

GhostPotato. Just pick out the code we need.

netsync. Use the Netlogon Remote Protocol (MS-NRPC) to dump the target hash.

GetMail. 利用NTLM Hash读取Exchange邮件

MSSQL_CLR. MSSQL CLR for pentest.

DomainHiding. external c2 use domainhiding.

p12tool. A simple Go script to brute force or parse a password-protected PKCS#12 (PFX/P12) file.

VcenterKit. Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

hackredis. Python

warp_proxy. cloudflare socks5 server

webshell. This is a webshell open source project

WebDAV. Set Up WebDAV Server for Remote File Sharing and more

CVE-2019-1040-dcpwn. CVE-2019-1040 with Kerberos delegation

tshtun. Py写的tsh的流量加解密过程。

xslt_poc. Execute codes From XSLT

mousejack_replay. mousejack hack

Awesome-Hacking-Resources. A collection of hacking / penetration testing resources to make you better!

pentest_study.

Python_Codes. some python codes

RealBlindingEDR. Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

2023Hvv. 2023 HVV情报速递~

Red-Team-Infrastructure-Wiki. Wiki to collect Red Team infrastructure hardening resources

0day. 各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

cf. Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

FastJsonParty. FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用

RedisModules-ExecuteCommand. Tools, utilities and scripts to help you write redis modules!

CVE-2018-8581. CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

nextnet. nextnet is a pivot point discovery tool written in Go.

r77-rootkit. Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

AD-Attack-Defense. Active Directory Security For Red & Blue Team

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

wsMemShell. 一种全新的内存马

SharpMemshell. HttpListener shell in csharp.