Brosck

mantra. 「🔑」A tool used to hunt down API key leaks in JS files and pages

Awesome-AV-EDR-XDR-Bypass. Awesome AV/EDR/XDR Bypass Tips

Reaper. 「💀」Proof of concept on BYOVD attack

Condor. 「🛡️」AVs/EDRs Evasion tool

Frosty. 「🧊」Ring 3 Rootkit for Windows 10

Pingoor. 「🚪」Linux Backdoor based on ICMP protocol

L1LKiller. 「⚠️」Performing a BYOVD on the truesight.sys driver

BugBountyTricks. 「🐞」Bug Bounty Tricks

APIHookingDetector. 「⚙️」Detect which native Windows API's (NtAPI) are being hooked

1nf0-hunt3r. 『🔍』Simple Information finder using Google Dork

MBROverwrite. 「💽」MBR Overwrite malware for linux

Rebellion. 「⚔️」Ring 0 Rootkit for Linux Kernels x86/x86_64 5.x/6.x

SimpleASMKernel. 「💻」Simple kernel made in 16-bit assembly only

Nullog. 「🧹」Clear logs after an invasion

Metafind. 「📖」Tool created to extract metadata from a domain

Digisploit. 「⚙️」Create automatic exploits for digispark

Zoris. 「🚪」The hidden hookless backdoor

EHoney. 「🍯」Simple low-interaction honeypot with FTP, Telnet and Web

Farllen. 「🚪」Port forwarding tool to gain access to internal devices

CORScan. 「🔎」CORS vulnerability scanner

ProcessInjection. 「💉」Simple Windows Process Injection Script

BToken. 「🔑」Discord Brute Force Token

AlquymiaCTF2023. C

RustSCLoader. 「🔄」A simple code that will load a shellcode directly into RAM memory in a new process

RPI4-Covenant-C2-Installer. 「🖥️」Covenant C2 Installer for RPI 4

HowToHunt. Tutorials and Things to Do while Hunting Vulnerability.

Detective-URL. 『🔎』A simple program to search directories on websites

ProcessDump. 「⭐️」Tool for dumping information from a process

BinaryExploitation. 「💽」Sample files about buffer overflow from my article

Pentest. 『🕵️』Lista de várias coisas relacionadas ao Pentest

brosck.

wel. 「🌎」Web Exploration Laboratory

Crackme. 「👾」Some binaries for you to crack

CVE-2022-1077. TEM FLEX-1080/FLEX-1085 1.6.0 log log.cgi Information Disclosure

kill-floor. 「☣」Unofficial (recreated) code for kill-floor.exe malware

FWHook. 「💥」Tool made to Attack Discord Webhooks

hexc. 「⚙️」Simple header for C language to encode and decode hex

1900-to-2019-wordlist. 「📄」Wordlist from 1900 to 2019 for brute force

DarkRaid. 「💣」Discord Raid

THM-Writeups. 「💻」TryHackMe Writeups

CVE-2006-3392. Python

brosck.github.io. Ruby

CVE-2022-4944. 「💥」CVE-2022-4944: KodExplorer <= 4.49 - CSRF to Arbitrary File Upload

wolfy. Wolfy AV Bypasser

RingReaper. Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

KodExplorer. A web based file manager,web IDE / browser based code editor