Our Tips&Tricks

Bypass Credential Guard by patching WDigest.dll using only NTAPI functions

Repository of yara rules

DotDotPwn - The Directory Traversal Fuzzer

Arbitrium is a cross-platform, fully undetectable remote access trojan, to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding rules

Undetectable payload for Windows 10 and 11

This map lists the essential techniques to bypass anti-virus and EDR

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

Small collection of debug-related drop-in c/c++-utils

Corelan Repository for mona.py

Discord Remote Administration Tool fully written in c#, stub size of ~75kb, over 40 post exploitations modules

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

an awesome list of honeypot resources

Kooky cURL-powered replacement for reverse shell via /dev/tcp

ONLYOFFICE Docs is a free collaborative online office suite comprising viewers and editors for texts, spreadsheets and presentations, forms and PDF, fully compatible with Office Open XML formats: .…

A Python based ingestor for BloodHound

Open Source Inventory Management System

movecert

LSPatch: A non-root Xposed framework extending from LSPosed

Small application to help android developers to quickly enable and disable proxy settings

Inject RDPThief into memory with PowerShell.

A Proof of Concept for demonstrating Task hijacking in Android using an attacker and a victim app.

Maps vscode:// URL schemes to Visual Studio Code

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.