Synacktiv

Modmobmap. Map 2G/3G/4G and more cellular networks in real live with a simple smart phone, pretty much like osmocomBB monitoring feature.

Modmobjam. A smart jamming proof of concept for mobile equipments that could be powered with Modmobmap tool

lightspeed. PoC for the iOS 11.4.1 and MacOS 10.13 kernel vulnerability in lio_listio

stuffz. Repository containing many useful scripts

CVE-2018-4193. exploit for CVE-2018-4193

kernelcache-laundering. load iOS12 kernelcaches and PAC code in IDA

rdp2tcp. rdp2tcp is a tunneling tool on top of remote desktop protocol (RDP). It uses RDP virtual channel capabilities to multiplex several ports forwarding over an already established rdesktop session.

pcileech_hpilo4_service. PCILeech HP iLO4 Service

inyourface. InYourFace is a software used to patch unencrypted and unsigned JSF ViewStates.

AJPy. AJPy aims to craft AJP requests in order to communicate with AJP connectors. Reference documentation: https://tomcat.apache.org/connectors-doc/ajp/ajpv13a.html

pcileech. Direct Memory Access (DMA) Attack Software

exploiting-cve-2017-5123. Source code and configuration files related to our article in MISC96

kerberom. Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (SPN) within an Active Directory. Works on Linux and Windows and support Windows implicit authentication

nmap-scrap. nmap-scrap is an HTTP exploration utility based on Nmap XML outputs. This tool aims to address discovering issues when dealing with large scopes by parsing Nmap XML outputs and extracting only required information.

grehack. Python

jimmix. JimmX provides a good way to interact with the JMXInvokerServlet and EJBInvokerServlet servlets exposed by JBoss servers <= 6.x (versions 4.x and 5.x are currently supported).

AxSuite. AxSuite is a toolset aimed to retrieve in-memory secrets saved by AxCrypt 1.0

metasploit-framework. Metasploit Framework