Parses logs created by Cobalt Strike or Brute Ratel and creates an SQLite DB which can be used to create custom reports. - Patrick-DE/C2-logparser

EnumVolcano is an open source Bash noscript which is used to perform automated enumeration for privilege escalation. This tool is dedicated to ethical hackers, red teamers, blue teamers & sec...

Learning Aid - Top Base64 Encodings Table. GitHub Gist: instantly share code, notes, and snippets.

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock - GitHub - liamg/traitor: :arrow_up: :fire: ...

Detect Tactics, Techniques & Combat Threats. Contribute to rabobank-cdc/DeTTECT development by creating an account on GitHub.

spring-cloud-gateway-rce CVE-2022-22947. Contribute to k3rwin/spring-cloud-gateway-rce development by creating an account on GitHub.

As you may know, Oracle Access Manager (OAM) is a popular SSO product used by many big corp such as Oracle, VMware, Huawei, Qualcomm, …

CVE-2022-0847 POC. Contribute to breachnix/dirty-pipe-poc development by creating an account on GitHub.

Exploits for Hotel Druid 3.0.3 - Remote Code Execution (RCE) CVE-2022-22909 - kaal18/CVE-2022-22909

This is a windows maching login page designed using HTML, CSS and JS. This can be used for red teaming or cybersecurity awareness related purposes. There are some more things that I need to do and ...

If you're anything like me, you will tend to rip your test lab down and build it again at least once a day. Let's do it automagically!

Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit - GitHub - M4xSec/Apache-APISIX-CVE-2022-24112: Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept ...

In a similar vein to Project 2, in this third and final project, we were tasked with performing the duties of a Red Team pen tester and a Blue Team SOC analyst, with the added wrinkle of inspecting...

Providing security research and red team techniques

Using a still unpatched vulnerability in the PHP library dompdf (used for rendering PDFs from HTML), we achieved RCE on a web server with merely a reflected XSS vulnerability as entry point.

Aretha Red Teaming conceptual mockup. Contribute to OxfordHCC/arethart development by creating an account on GitHub.

Red Team Field broken down into subject in markdown format - infosecwatchman/rtfm-1

With this series, we present the results of our research on the security of popular developer tools with the goal of making this ecosystem safer: today’s article revisits Git integrations.