Hacking

byt3bl33d3r, /dev/random blog.py

This repository is focused on cybersecurity in the industrial world. Many industrial communication protocols and equipment is investigated and pentested - GitHub - miguelob/ICS-Hacking: This reposi...

We discovered an application with "new $a($b)" and no user-defined classes. We turned it to RCE.

Defeating Windows User Account Control. Contribute to hfiref0x/UACME development by creating an account on GitHub.

Fileless UAC bypass via COM hijack using sdtlc.exe auto-elevated process.

log4j rce test environment and poc. Contribute to leonjza/log4jpwn development by creating an account on GitHub.

Commit for pwnkit fix

Contribute to mandiant/ADFSpoof development by creating an account on GitHub.

A crappy LSASS dumper with no ASCII art. Contribute to helpsystems/nanodump development by creating an account on GitHub.

Manipulating and Abusing Windows Access Tokens. Contribute to S1ckB0y1337/TokenPlayer development by creating an account on GitHub.

As we head into 2022, ransomware groups continue to plague our digital environment with new and interesting techniques to bypass Antivirus (AV) and Endpoint Detection and Response (EDR) solutions and ensuring the successful execution of their ransomware payloads.   In December 2021, Stroz Friedberg’s Incident Response Services team engaged in a Digital Forensics and Incident […]

UAC Bypass via DLL hijacking of Microsoft Support Diagnostic Tool (MSDT). The UAC bypass method described here is based on DLL hijacking which happens when loading the Bluetooth diagnostic package.

Lateral movement is the process of moving from one compromised host to another. Penetration testers and red teamers alike commonly used to…

You can think about the post-exploitation part of penetration testing as an army or rebel force living off the land. You’re scrounging around the victim’s website using what’s available —...

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock - GitHub - liamg/traitor: Automatic Linux pr...

Platform for emulation and dynamic analysis of Linux-based firmware - GitHub - firmadyne/firmadyne: Platform for emulation and dynamic analysis of Linux-based firmware

Web on top of any protocol. Contribute to nishitm/wotop development by creating an account on GitHub.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF - GitHub - swisskyrepo/PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and ...

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. - GitHub - antonioCoco/RemotePotato0: Just another "Won't Fix" W...

Series of System Administration Tools. Contribute to M2Team/NSudo development by creating an account on GitHub.

A command-line hex viewer. Contribute to sharkdp/hexyl development by creating an account on GitHub.

A tool to dump the login password from the current linux user - GitHub - huntergregal/mimipenguin: A tool to dump the login password from the current linux user

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64) - GitHub - m0nad/Diamorphine: LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

My notes about all things red teaming experiments and more. (Very well done notes, great stuff on red teaming)