cvlabsio Goto Github PK

software-engineering-notes

My software engineering notes.

solarwinds-cve-2021-35250

spark-workshop

Labs and data files for a full-day Spark workshop

speakeasy

Windows kernel and user mode emulation.

spfabuse

SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

spoofcall

spoof return address

spoolsploit

A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.

spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

spycast

A crossplatform mDNS enumeration tool.

spyglass

A personal search engine: Create a searchable library from your personal documents, interests, and more!

sqlknife_0x727

适合在命令行中使用的轻巧的SQL Server数据库安全检测工具

sqlrecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

srdi-rs

Rusty Shellcode Reflective DLL Injection (sRDI)

ss7maper

SS7 MAP (pen-)testing toolkit

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

ssn_resolver

dynamically resolving System Service Number (syscall number) by offsets from the PEB with API hashing

stackplz

基于eBPF的堆栈追踪工具

stager_libpeconv

A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

stinkyloader

It stinks

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

stracciatella

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

strace

A DTrace on Windows Reimplementation

stryker

Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303

stuxnet

Public open-source code of malware Stuxnet (aka MyRTUs).

sub-drill

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

suborner

sunrpc

python library implementing RFC1057 (Remote Procedure Call - Portmapper Protocol)

supermem

A python script developed to process Windows memory images based on triage type.