Askar

Octopus. Open source pre-operation C2 server based on python and powershell

DNSStager. Hide your payload in DNS

RCEScanner. Simple python script to extract unsafe functions from php projects

ExchangeFinder. Find Microsoft Exchange instance for a given domain and identify the exact version

XMLDecoder-payload-generator. A simple python script to generate XML payloads works for XMLDecoder based on ProcessBuilder and Runtime exec

Bughound. Static code analysis tool based on Elasticsearch

Shellcode-In-Memory-Decoder. A simple C implementation to decoded your shellcode and writes it directly to memory

CVE-2020-8813. The official exploit for Cacti v1.2.8 Remote Code Execution CVE-2020-8813

shellcode-process-injection. Simple C implementation to perform shellcode process injection via win32 APIs

XSSRadare. A Cross Site Scripting scanner using selenium webdriver

Blinder. A python library to automate time-based blind SQL injection

DNSKeyGen. A tool to exchange decryption keys for command and control (C2) beacons and implants through DNS records.

MalleableC2-Profiles. A collection of Cobalt Strike Malleable C2 profiles

Octopus-C2-RedTeam-infrastructure-automation. Python

CVE-2020-12078. The official exploit for Open-AudIT v3.3.1 Remote Code Execution CVE-2020-12078

CVE-2020-14947. The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947

CVE-2019-20224. The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224

CVE-2019-16662. The official exploit for rConfig 3.9.2 Pre-auth Remote Code Execution CVE-2019-16662

HTTPFuzzer. HTTPFuzzer is a simple python script to perform multiple fuzzing techniques for HTTP protocol

CVE-2019-13024. The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024

Linux-Root-Kit. Simple Linux RootKit written in python

CVE-2024-11320. Exploit for Pandora FMS Remote Code Execution CVE-2024-11320

CVE-2018-20434. The official exploit code for LibreNMS v1.46 Remote Code Execution CVE-2018-20434

CVE-2019-15029. The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029

CVE-2023-0315. The official exploit for Froxlor Remote Code Execution CVE-2023-0315

JinjaPwn. Web-based tool to generate and validate Malicious Jinja2 expression to use in offensive operations

CVE-2019-16663. The official exploit for rConfig 3.9.2 Post-auth Remote Code Execution CVE-2019-16663

Dr0p1t-Framework. A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

BlindSQLinjectionExploit. Python

powershell-extractor-elasticsearch. Python script to extract powershell scrips from elasticsearch based on windows event "4104"

wifi-jammer. Python automated wifi jammer

JiraLab. Docker-based lab to run multiple jira instances for security researchers

shellcodes. C

MicrosoftDCFTokenRequester. Simple and lazy script to request tokens from Microsoft using Device Code Flow

APT-Hunter. APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

PowerShell. Useful PowerShell scripts

CVE-2019-11510. Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

GitTools. A repository with 3 tools for pwn'ing websites with .git repositories available

impacket. Impacket is a collection of Python classes for working with network protocols.

Internet-Programming. HTML

auto_sniffer. Python

Stuff. Python

centreon. Centreon is a network, system, applicative supervision and monitoring tool

linuxprivchecker. linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Fingerprinter. CMS/LMS/Library etc Versions Fingerprinter

stem_finder. Python

python_Backdoor. Python

sqlmap-tamper-api. Allow SQLMap tamper to accept tamper scripts from all languages

shields. Concise, consistent, and legible badges in SVG and raster format

BOF_Collection. Various Cobalt Strike BOFs