queencitycyber Goto Github PK

ah2021workshop

Malware development for red teaming workshop

amber

Reflective PE packer.

bseept

Burp Suite Enterprise Edition Power Tools

credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

dynamic-dtd

A python Flask app that generates dynamic DTDs for easy out-of-band data exfiltration.

exploit-writing-for-oswe

Tips on how to write exploit scripts (faster!)

heap-exploitation

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure.

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

infosecuberwik

A massive curated list of curated lists of various info sec/pen testing tools, resources, and tricks covering multiple verticals.

ipwn

jwtjuggler

JWTJuggler (JOT JUGGLER): JWT & Authentication Testing Harness

kevtrends

Using CISA's Known Exploited Vulnerabilities Catalog (KEV) to search for vulnerabilities, exposures, CVE-ID's, and keywords.

lnk2pwn

Malicious Shortcut(.lnk) Generator

log4j-payloads

nexporter

nexporter: export & explore Nessus professional scan data.

offat

Tests your API automatically for common API vulnerabilities. Project is still Work In Progress. PRs are appreciated.

owa_info

QuickOWA

parkeddomains

printnightmare

queencitycyber

queencitycyber.github.io

replihack

robber

Robber is open source tool for finding executables prone to DLL hijacking

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

smapper

a drop-in replacement for Nmap powered by shodan.io

spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

spring4shell-curl

cURL configs for exploiting Spring4Shell