31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

aahar

adminhack

today we will hack the admin panel of the site.

alcatraz

x64 binary obfuscator

amsi-bypass

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

apktool

A tool for reverse engineering Android apk files

assembly-programs

autosneakphish

Automated evasive phishing infrastructure

beat-the-machine

Reverse engineering basics in puzzle form

bitvisor

Bitvisor: Thin layer hypervisor

blacklotus

BlackLotus UEFI Windows Bootkit

blogs

A collection of blog post articles on JavaScript, React, GraphQL and front-end development

cain-and-abel

Password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering

createscript

VBScript Automation

cve-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. CVE project by @Sn0wAlice

cve-2018-15473

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

cve-2021-31955-poc

cve-2021-31956

cve-2022-21907-vulnerability-poc

CVE-2022-21907 Vulnerability PoC

cve-2022-39952

POC for CVE-2022-39952

cve-2023-36745

cve-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator

davrelayup

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

dt

DeviceTree

edr-hooks

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilsln

A New Exploitation Technique for Visual Studio Projects

exploit-medium-cve-2021-41184

gateway-automator

giuda

Ask a TGS on behalf of another user without password