praetorian-inc/proxylogon-exploit

This repository has been archived on 09/Apr/2024
Stars
45
Rank 624,037 (Top 13 %)
Language
Python
License
Apache License 2.0
Created over 3 years ago
Updated over 3 years ago

praetorian-inc/proxylogon-exploit

praetorian-inc

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.

gokart

A static analysis tool for securing Go code

noseyparker

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

Hob0Rules

Password cracking rules for Hashcat based on statistics and industry patterns

pentestly

Python and Powershell internal penetration testing framework

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

PortBender

TCP Port Redirection Utility

DVRF

The Damn Vulnerable Router Firmware Project

fingerprintx

Standalone utility for service discovery on open ports!

gato

GitHub Actions Pipeline Enumeration and Attack Tool

trudy

A transparent proxy that can modify and drop traffic for arbitrary TCP connections.

pyshell

PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.

mitm-vm

An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.

gladius

Automated Responder/secretsdump.py cracking

snowcat

a tool to audit the istio service mesh

vulcan

a tool to make it easy and fast to test various forms of injection

ADFSRelay

Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS

goffloader

A Go implementation of Cobalt Strike style BOF/COFF loaders.

trident

automated password spraying tool

NTLMRecon

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

epictreasure

radare, angr, pwndbg, binjitsu, ect in a box ready for pwning

INTRACTABLEGIRAFFE

A Proof of Concept Rootkit Demonstrating Keylogging and Virtual File System (VFS) Capabilities

hashcatJS

An implementation of the hashcat rules engine in javascript

slack-c2bot

Slack C2bot that executes commands and returns the output.

ruby_hashcat

Command line wrapper, Library, and Rest API for oclHashcat.

dert

DNS Enumeration and Reconnaissance Tool

Matryoshka

Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.

Okta_Watering_Hole

Next Generation Phishing Tool For Internal / Red Teams

ctf-writeups

Collection of Praetorian solutions to CTF challenges

chariot-ui

Chariot Offensive Security Platform

konstellation

Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.

bsidesaustin

chariot-launch-nuclei-templates

burp-wcf-gzip

Burp extension for decoding WCF-gzipped requests.

gcloud-lockdown

Scripts to demonstrate VPC Service Controls between tenant and shared projects

highlight

Text file to BMP image with box drawing and blurring from the command line

log4j-detector

Log4j detector and reporting server for scalable detection of vulnerable running processes.

sonicwall-nsv-decrypter

aws-labs

tpm_bound_sa_key

rpi-setup

set up rpi for zbwardrive

zeroqlik-detect

A Nuclei template to detect ZeroQlik (CVE-2023-41265 and CVE-2023-41266)

product-frontend-interview

product-backend-interview

praetorian-cli

CLI and SDK for interacting with the Praetorian Chariot platform