@0x09AL
github

0x09AL

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    3,488
  • Global Rank 8,274 (Top 0.3 %)
  • Followers 916
  • Following 29
  • Registered over 7 years ago
  • Most used languages
    Python
         21.4 %
    Ruby
         21.4 %
    Go
         21.4 %
    C++
         21.4 %
    C#
         14.3 %

Top repositories

1

RdpThief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.
C++
951
star
2

raven

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.
Go
753
star
3

IIS-Raid

A native backdoor module for Microsoft IIS (Internet Information Services)
C++
488
star
4

WordSteal

This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.
Python
228
star
5

DNS-Persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.
C++
197
star
6

CVE-2018-8174-msf

CVE-2018-8174 - VBScript memory corruption exploit.
Ruby
166
star
7

DropboxC2C

DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
Python
143
star
8

go-deliver

Go-deliver is a payload delivery tool coded in Go.
Go
116
star
9

CVE-2017-11882-metasploit

This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.
Ruby
98
star
10

Browser-C2

Post Exploitation agent which uses a browser to do C2 operations.
Go
96
star
11

AzureCLI-Extractor

A tool to extract and abuse access tokens from AzureCLI for bypassing 2FA/MFA.
C#
43
star
12

RsaTokenExtractor

A simple toolkit on extracting RSA Software Tokens from RSA SecureID
C#
41
star
13

my-exploits

My public exploit collection.
Python
31
star
14

0x09al.github.io

Ruby
2
star