Hacking

fatedier/frp: A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Building a Budget Red Team Implant

center-for-threat-informed-defense/adversary_emulation_library: An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

trickest/cve

LOLDrivers

GitHub - GoSecure/pyrdp: RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

Rpc toolkit fantastic interfaces how to find

Nightmare: One Byte to ROP // Deep Dive Edition - HackMD

Windows 10 Update Archive

GitHub - SafeBreach-Labs/Back2TheFuture: Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.

Winbindex - The Windows Binaries Index

GitHub - optiv/Ivy: Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

GitHub - D1rkMtr/RecyclePersist: implementation of Persistence via Recycle Bin by adding "open\command" subkey to the "HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell" key and changing its value to the implant path

GitHub - Aetsu/OffensivePipeline: OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

All of the Best Links and Resources on Cyber Security.

The toddler’s introduction to Heap exploitation (Part 1)

Dissecting and Exploiting TCP/IP RCE Vulnerability “EvilESP”

FuzzySecurity | Windows Hacking Tutorials

Heap Overflow Exploitation on Windows 10 Explained | Rapid7 Blog

Smbleedingghost writeup chaining smbleed cve 2020 1206 with smbghost

CVE-2021-31985: Exploiting the Windows Defender AsProtect Heap Overflow Vulnerability

"I'll ask your body": SMBGhost pre-auth RCE abusing Direct Memory Access structs

GitHub - mgeeky/Penetration-Testing-Tools: A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

Lord Of The Ring0 - Part 1 | Introduction - Ido Veltzman - Security Blog

GitHub - JohnTroony/php-webshells: Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

GitHub - wader/fq: jq for binary formats

What is Phar Deserialization

Attacking Active Directory: 0 to 0.9 | zer1t0

GitHub - h3xduck/TripleCross: A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

PHP Object Injection | OWASP Foundation