heikipikker

Interesting apt report collection and some special ioc express

APT34/OILRIG leak

Smart Greybox Fuzzing

Mass static malware analysis tool

A collective list of public JSON APIs for use in security. Contributions welcome

A book about running Elasticsearch

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

Malware variant classifier based on Random Forest classification algorithm using Cuckoo Sandbox reports.

Malware C2 Panel Exploits

Amadey C2 Source Code

KPOT Admin Source Code

Special Project Hook C2 Source Code

Neutrino C2 Source Code

azorult 3.3

Smart Install Exploitation Tool

Bypassing disabled exec functions in PHP via imap_open

Remote Access Tool/Botnet

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

cve-2018-10933 libssh authentication bypass

CVE-2018-10933 very simple POC

Spawn to shell without any credentials by using CVE-2018-10933

Hardware backdoors in some x86 CPUs

RouterOS Bug Hunt Materials Presented at Derbycon 2018

Email recon made fast and easy, with a framework to build on

Ready to run scripts for network analysis

Test CVE-2018-0296 and extract usernames

Anti - Sandbox with Drivers for Windows. This trick bypass Cuckoo Sandbox, Falcon Sandbox and more.

An OSINT tool that discovers sub-domains by searching Certificate Transparency logs

a tool to extract sub domains from the Virus Total API