inosec2 Goto Github PK

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

bofmask

bofroast

Beacon Object Files for roasting Active Directory

bofs

Cobalt Strike Beacon Object Files

bouncygate

HellsGate in Nim, but making sure that all syscalls go through NTDLL.DLL (as in RecycledGate).

brokencrystals

A Broken Application - Very Vulnerable!

brown-bags

brute53

A tool to bruteforce nameservers when working with subdomain delegations to AWS.

bucketbunny

AWS S3 open bucket poc automated script.

bucky

Bucky (An automatic S3 bucket discovery tool)

buffer-overflow-guide

This Bufferflow Guide includes instructions and the scripts necessary for Buffer Overflow Exploitation. This guide is a supplement for TheCyberMentor's walkthrough. Please watch his walkthrough if you're confused. Feel free to implement Pull Requests or raise Issues.

bug-bounty-roadmaps

Bug Bounty Roadmaps

bugbounty-resources

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

burp-suite-certified-practitioner-exam-study

Burp Suite Certified Practitioner Exam Study

burp2malleable

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

burp2slack

Push notifications to Slack channel or to custom server based on BurpSuite response conditions.

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

burpsuiteloader

Burp Suite loader version --> ∞

bypass-clm

PowerShell Constrained Language Mode Bypass

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

callobfuscator

Obfuscate specific windows apis with different apis

callstackmasker

A PoC implementation for dynamically masking call stacks with timers.

callstackspoofer

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

catfish-private

Y0Lo5w4G

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

chainoffools

A PoC for CVE-2020-0601

charlotte

c++ fully undetected shellcode launcher ;)

cheatsheet

cheatsheet