Guillaume Quéré

pwn_jenkins. Notes about attacking Jenkins servers

bloodhound_linux. Ingest openldap data into bloodhound

mRemoteNG_password_decrypt. Decrypt mRemoteNG passwords

WindowsPentestCommands. Commands used in Windows penetration tests

CVE-2020-7931. Hacking Artifactory with server side template injection

ngp2. ncurses-grep: interactively navigate grep-like results

linux_backdooring. List of possible Linux backdoors

DotNetInjector. Inject code into .net applications

PulseSecure_session_hijacking. Attacking and defending web and VPN session hijacking in Pulse Secure Connect

ArtifactoryDecryptor. Tool to decrypt Artifactory encrypted secrets

CVE-2019-6693. Decrypt FortiGate configuration secrets

javaWebShell. Java WebShell

findcrypt-yara-autocreate. IDA pro plugin to find crypto constants (and more)

linux_scan. Shell

PasteHunter. Scanning pastebin with yara rules

unix_passwords. List of UNIX functions which accept a password in the commandline.

stringsearch. Collection of string search algorithms

informatica_decrypt. Decrypt Informatica 10.4 and 10.5 secrets

CVE-2020-6364. Remote code execution in CA APM Team Center (Wily Introscope)

CVE-2017-6913. Details about CVE-2017-6913 - Stored XSS in open-xchange's webmail

PwnService. Hijack a SYSTEM service to drop a SYSTEM shell to the currently logged in user

barebox. The barebox bootloader

gimmecredz. You're a #pentester and you totally pwn that linux box, congrats! Now what? You can launch gimmecredz.sh which will try to extract all passwords from known locations.

CVE-2018-16987. Details about CVE-2018-16987 - Cleartext storage of TA servers' passwords in Squash TM

ansible-vault-decrypt. Decrypt Ansible Vault encrypted files

ngp. Ncurses code parsing tool

beaglenoob. Introduction to userspace I/O embedded Linux on the BeagleBone