inosec2 Goto Github PK

c_syscalls

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

crossc2kit

CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some interfaces for users to call to manipulate the CrossC2 Beacon session, thereby extending the functionality of Cobalt Strike.

crto

Certified Red Team Operator

crtp-cheatsheet

Cheatsheet for the commands learned in Attack and Defense Active Directory Lab

cs-token-vault

In-memory token vault BOF for Cobalt Strike

cs-video-courses

List of Computer Science courses with video lectures.

csharp_reverse_shell

c# reverse shell poc

csharptools

Collection of useful CSharp Tools for assessments.

cursedchrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

cve-2019-11510-poc

Pulse Secure SSL VPN pre-auth file reading

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2020-0601

PoC for CVE-2020-0601

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2020-5902

CVE-2020-5902 BIG-IP

cve-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

cve-exploits

PoCs for public CVE's I have been working on.

cve-reverse

d1rklrd

Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time

d4rkxss

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

damn-vulnerable-defi

darkarmour

Windows AV Evasion

darkloadlibrary

LoadLibrary for offensive operations

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

deathstar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

deepsleep

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

defcon-cicd-pipelines-workshop

defendercheck

Identifies the bytes that Microsoft Defender flags on.

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness

depix

Recovers passwords from pixelized screenshots

digitalocean-debian-to-arch

Script to convert a Debian installation on DigitalOcean to Arch Linux