How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
how2heap is an educational resource and technical testbed for learning heap-based vulnerabilities and memory allocator internals. It provides a collection of source code examples and binaries that serve as a laboratory for studying memory corruption techniques specifically targeting the glibc malloc implementation. The project focuses on the development of exploit primitives, such as tcache poisoning and double frees, to redirect program execution. It includes a suite of implementations for bypassing memory protections and manipulating heap metadata to achieve arbitrary memory writes. The fr
This project is a red teaming knowledge base and offensive security playbook designed to simulate adversary behavior. It serves as a comprehensive collection of technical guides and tactics for executing red team operations. The repository provides detailed instructions for Active Directory exploitation, including Kerberos abuse and domain privilege escalation. It covers defense evasion through API unhooking and payload obfuscation, as well as Windows internals research involving the manipulation of kernel objects and system memory. The capability surface extends to network penetration testi
Exchange your privileges for Domain Admin privs by abusing Exchange
The main features of dirkjanm/privexchange are: Exploit Development, Domain Privilege Escalation, Exchange and Cloud Security.
Projects with overlapping indexed features include: shellphish/how2heap — how2heap is an educational resource and technical testbed for learning heap-based vulnerabilities and memory allocator… mantvydasb/redteaming-tactics-and-techniques — This project is a red teaming knowledge base and offensive security playbook designed to simulate adversary behavior.… alpha1ab/cve-2018-8120. antoniococo/juicypotatong — Another Windows Local Privilege Escalation from Service Account to System. antoniococo/roguepotato — Another Windows Local Privilege Escalation from Service Account to System. alxbrn/gdrv-loader.