Learning Aid - Top Base64 Encodings Table. GitHub Gist: instantly share code, notes, and snippets.

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock - GitHub - liamg/traitor: :arrow_up: :fire: ...

Detect Tactics, Techniques & Combat Threats. Contribute to rabobank-cdc/DeTTECT development by creating an account on GitHub.

spring-cloud-gateway-rce CVE-2022-22947. Contribute to k3rwin/spring-cloud-gateway-rce development by creating an account on GitHub.

As you may know, Oracle Access Manager (OAM) is a popular SSO product used by many big corp such as Oracle, VMware, Huawei, Qualcomm, …

CVE-2022-0847 POC. Contribute to breachnix/dirty-pipe-poc development by creating an account on GitHub.

Exploits for Hotel Druid 3.0.3 - Remote Code Execution (RCE) CVE-2022-22909 - kaal18/CVE-2022-22909

This is a windows maching login page designed using HTML, CSS and JS. This can be used for red teaming or cybersecurity awareness related purposes. There are some more things that I need to do and ...

If you're anything like me, you will tend to rip your test lab down and build it again at least once a day. Let's do it automagically!

Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit - GitHub - M4xSec/Apache-APISIX-CVE-2022-24112: Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept ...

In a similar vein to Project 2, in this third and final project, we were tasked with performing the duties of a Red Team pen tester and a Blue Team SOC analyst, with the added wrinkle of inspecting...

Providing security research and red team techniques

Using a still unpatched vulnerability in the PHP library dompdf (used for rendering PDFs from HTML), we achieved RCE on a web server with merely a reflected XSS vulnerability as entry point.

Aretha Red Teaming conceptual mockup. Contribute to OxfordHCC/arethart development by creating an account on GitHub.

Red Team Field broken down into subject in markdown format - infosecwatchman/rtfm-1

With this series, we present the results of our research on the security of popular developer tools with the goal of making this ecosystem safer: today’s article revisits Git integrations.

We would like to thank researcher Abdelhamid Naceri for his great work in developing these exploit techniques, as well as for the vulnerabilities he has been reporting to our program. We look forward to seeing more from him in the future. Until then, follow…

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things - GhostTroops/TOP