~/hackyfeed $

The HackTheBox repository contains write-ups detailing the author’s solutions to various HackTheBox machines, primarily aimed at preparing for the Offensive Security Certified Professional (OSCP) certification. Notable features include comprehensive problem-solving approaches and methodologies applicable to penetration testing scenarios.

GetSystem is a tool designed for elevating privileges by spawning SYSTEM shells effectively. Its primary use case is in penetration testing and security assessments, where gaining SYSTEM level access is crucial. Notable features include an included binary for ease of use and streamlined execution.

The GCP-Attack-Defense project provides comprehensive documentation of attack and defense vectors specifically in the Google Cloud Platform (GCP), aiding users in understanding security threats and mitigation strategies. It features detailed research on various aspects of cloud security, including privilege escalation and defense evasion, as well as tools like gLess and GATOR for practical application. The project serves both as an educational resource and a reference for cybersecurity professionals studying GCP vulnerabilities.

Flanders-Trojan is a Windows-based trojan developed for academic purposes that employs C++ and consists of three main components: a Loader for initial setup and privilege escalation, a Payload for executing various malicious actions (such as file encryption, keylogging, and DDoS attacks), and a Server that functions as the command and control center for managing infected devices. Notable features include VM detection, UAC bypass, and real-time communication with a C2 server, highlighting its capabilities in orchestrating cyberattacks and gathering sensitive information.

EvilTree is a Python3 tool that serves as a standalone remake of the classic "tree" command, enhanced with the capability to search for user-defined keywords or regex patterns within files. Its primary use case is to assist in identifying sensitive information within complex directory structures during post-exploitation enumeration. Notable features include the ability to highlight matches in search results, support for both keyword and regex searches, and an option to filter results to show only files containing matching content.

EPScalate is a proof-of-concept exploit that targets an elevation of privilege vulnerability (CVE-2023-31497) in QuickHeal's Seqrite Enterprise Endpoint Security solution. The tool leverages weak permissions on directory and file installations, enabling low-privilege users to escalate privileges to root by overwriting executable files or manipulating startup scripts. Notable features include the ability to perform privilege escalation via either daemon binary overwrites or injecting reverse shell commands into system initialization scripts.

Elevation Station is a privilege escalation tool that facilitates the duplication and manipulation of system tokens to gain higher privileges on Windows systems. Its primary use case includes bypassing User Account Control (UAC) and achieving SYSTEM-level access, with notable features such as becoming a TrustedInstaller and utilizing various escalation methods like process and thread duplication, along with named pipes and remote thread injection. This tool aims to avoid antivirus detection while providing users with a deeper understanding of token management and escalation techniques.

DeadPotato is a privilege escalation tool designed to exploit the DCOM RPCSS vulnerability to gain NT AUTHORITY\SYSTEM level access on Windows systems. Its primary use case includes executing commands, creating new administrator accounts, establishing reverse shells, and dumping sensitive credentials using various modules like `-cmd`, `-newadmin`, and `-mimi`. Notable features include the ability to disable Windows Defender and collect domain data for BloodHound, making it versatile for penetration testing and security assessments.

Cybersec Notes is a comprehensive, expandable checklist aimed at individuals seeking to enhance their knowledge in various cybersecurity domains, including application, mobile, API, and network security. The tool features a structured outline of key topics and vulnerabilities, supplemented with resource links, while encouraging community contributions for continuous improvement and accuracy. Notable aspects include coverage of OWASP Top 10 vulnerabilities across multiple platforms and concepts related to DevSecOps.

CVE-2024-33352 identifies a critical vulnerability in BlueStacks for Windows, affecting versions prior to 10.40.1000.502. This flaw allows unprivileged users to access and modify configuration files stored in a world-writeable directory, enabling them to backdoor the virtual machine and gain code execution as a privileged user by manipulating shared folder settings. The README provides a detailed exploitation method and emphasizes the necessity of updating to a patched version to mitigate this security risk.

Wall-Escape (CVE-2024-28085) is an exploit tool designed to leverage a vulnerability in the util-linux wall command that allows attackers to inject escape sequences into command line arguments, potentially leaking sensitive information such as user passwords. The tool sets up an environment to execute commands while monitoring for password input, effectively capturing credentials during user interactions—particularly in contexts like SSH login or sudo commands. Notable features include the ability to manipulate command outputs and create a fake prompt that misleads users into revealing their passwords.

This repository provides an exploit for the Parallels Desktop vulnerability CVE-2023-27326, which allows local attackers to escalate privileges on affected installations. The exploit targets a flaw in the Toolgate component, enabling the execution of arbitrary code due to inadequate validation of user-supplied paths in file operations. It is notable for its specific applicability to version 18.0.0 of Parallels Desktop and the details of its exploitation, which are documented alongside a proof of concept.

CVE-2022-27502 is a DLL hijacking exploit targeting RealVNC Server versions up to 6.9.0, allowing for arbitrary command execution by leveraging a vulnerable installation process. The tool enables users to execute any command through a crafted DLL that captures the output in a specified output file. Notable features include the ability to modify the executed command by editing specific code lines and recompiling the DLL.

Confluence Hack is a tool designed to exploit CVE-2023-22515, enabling the creation of a new administrative user and compromising audit logs in Confluence servers. It features a web-based command shell plugin that allows for executing commands remotely, verified to work on Confluence Server 8.5.1. The repository is intended for educational purposes only and emphasizes ethical use.

ChainReactor is an AI-driven tool designed to automate the discovery of privilege escalation chains on Unix systems. By analyzing system information and known vulnerabilities, it models the escalation process using Planning Domain Definition Language (PDDL) to generate potential exploitation chains. Notable features include its ability to rediscover existing exploits, identify new chains, and its successful evaluation on various platforms, including Amazon EC2 and Digital Ocean.

AuthInspector is a Golang-based tool designed for efficient authorization and authentication testing, specifically for extracting request details from BurpSuite exports. It utilizes Goroutines to conduct comprehensive checks based on user-defined headers and outputs results in a structured CSV format. Notable features include customizable request options, support for proxy configurations, and the ability to include request/response bodies in results.

Active-Directory-Exploitation is a comprehensive PowerShell-based toolkit designed for conducting penetration testing and security assessments on Active Directory environments. Its primary use case is to enumerate domains, escalate privileges, enable lateral movement, and achieve persistence through various methodologies, including Kerberos ticket manipulation and exploitation of SQL Server trusts. Notable features include extensive modules for local and domain privilege escalation, detailed methods for lateral movement and persistence, and capabilities for cross-forest attacks.

The IOCTL Linux Driver repository provides a foundational example for creating an IOCTL driver in Linux, enabling kernel mode access to special registers and memory-mapped regions for user mode applications. Notable features include an example application demonstrating driver interaction, a structured codebase with modular files for the driver and application, and debugging instructions utilizing printk output and strace for tracing user-kernel interactions.

The Fuck-Windows-Security script is a malicious tool designed to disable various Windows security features through registry manipulation, effectively bypassing User Account Control (UAC) and gaining elevated privileges. It implements an anti-virtual machine feature to ensure execution on actual systems, while also providing persistence through self-replication by copying itself to the startup folder. Notably, it disables numerous critical security aspects, including Windows Defender, Firewall, and system recovery options, allowing for potential exploitation of the target environment.

AKQ_0D_PE is a playful tool designed to simulate a Zero-day local privilege escalation exploit targeting a vulnerability in the Linux PipeFS subsystem. It demonstrates memory corruption techniques, ROP injection, and namespace traversal, all while providing an interactive root shell, but it is ultimately a prank and does not exploit a real vulnerability. The tool serves as an educational illustration of exploitation methodologies and is intended for demonstration purposes only.

Z-Jail is a lightweight multi-layer sandbox for executing native code on Linux, designed for scenarios such as CI pipelines and CTF challenges. It features seven ordered isolation layers that enforce security measures like namespaces, capability dropping, seccomp-BPF syscall whitelisting, and auditing with JSON logging, all within a compact ~81 KiB binary and without external dependencies. This makes Z-Jail a unique solution that balances minimalism and robust security for code execution environments.

The repository contains a collection of writeups detailing solutions and methodologies used in various Capture The Flag (CTF) competitions, including Hack The Box (HTB). Its primary use case is to provide insights and explanations for participants looking to learn from past challenges. Notable features include links to social media for support and engagement, as well as visual representation of stargazers over time.

WindowsPrivilegeEscalationVulnerabilityDisplayBox is a Windows executable designed for detecting and demonstrating privilege escalation vulnerabilities for security research and educational purposes. Key features include the ability to modify PowerShell execution policies, take ownership of files, elevate privileges to SYSTEM or TrustedInstaller, and display current permissions of the program. This tool is strictly for demonstration and is best utilized in controlled environments.

Windows Kernel - Exploration is a repository that provides a collection of notes, tools, and code snippets for exploiting Windows kernel drivers, aimed at both research and offensive security applications. It covers both legacy driver vulnerabilities and modern exploitation techniques, including Bring Your Own Vulnerable Driver (BYOVD) methods, while offering resources for kernel debugging, PDB analysis, and understanding core primitives related to kernel exploits. Notable features include detailed discussions on essential exploit techniques, kernel mitigations, and various tools for PDB parsing and debugging.

VulnOS "Legacy" Lab Walkthrough offers a structured environment for foundational penetration testing training, allowing users to engage in practical exercises like reconnaissance, enumeration, and privilege escalation. The lab features guided chapters that simulate real-world scenarios by employing tools such as Nmap and Gobuster, and emphasizes techniques for discovering services, hidden files, and exploiting SUID binaries for privilege escalation.