huongAT megamindAT

Network recon framework.

A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

SSHPry v2 - Spy & Control os SSH Connected client's TTY

POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

post exploitation: dll injection, process hollowing, RunPe, Keyloggers, UacByPass, PayloadEncryption etc..

CMS/LMS/Library etc Versions Fingerprinter

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a …

SambaCry exploit and vulnerable container (CVE-2017-7494)

SSRF (Server Side Request Forgery) testing resources

Windows Remote Administration Tool via Telegram

A collection of PowerShell Modules for BloodHound/Empire Orchestration

AWS Auditing & Hardening Tool

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)

An iOS kernel exploit designated to work on all iOS devices <= 10.3.1

DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.

Vulnerable OTP/2FA Application written in PHP using Google Authenticator

Linux privilege escalation auditing tool

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

A subdomain enumeration tool.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

A simple keylogger for Windows, Linux and Mac

Simple script to automate brutforcing blind sql injection vulnerabilities

Screenshots with JavaScript

Generate Gmail Emailing Keyloggers to Windows.

iOS/macOS Remote Administration Tool