Hamid

A personal list of various resources for those who are interested in learning about infosec and hacking and keeping themselves up to date. This is by no means a complete nor fresh list, but I occasionally add entries to lists.

Private Nginx Rift ASLR lab, exploit chain, and demo recordings

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy. This is simply a Farsi (machine) translation of the original work by Alicia Sykes, whom deserves the credit.

A remote live memory viewer PoC based on the MongoBleed vulnerability primitive!

A few STUXNET samples and live traffic captures from July 2010 while many stuxnet implants were still operational.

A PoC Burp extension to merge the power of Neo4j with Burp Suite to identify common attack vectors across large number of hosts and API ednpoints. This is mostly mostly AI generated!

An AI agent and chatbot wrapper for python-apple-fm-sdk

A basic toolset to identify, extract and crack Fernet encrypted blobs.

useful cheat sheets as reference.

World's fastest and most advanced password recovery utility

A Neovim SAST workflow plugin for those of us who like doing it the good old TUI way and tired of bloated new "AI Powered" editors. This is NOT meant to find bugs automatically even with the LLM extension. It is meant to be used by humans!

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

This is a android spy app, which uploads user data such as contacts, messages, call log, send message(s), photos, videos, open a browser link etc. Android Rat

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

Unofficial and insecure Signal app, used by senior Trump officials like Mike Waltz, downloaded from the official TeleMessage website

A tool to extract the IdP cert from vCenter backups and log in as Administrator

Extract email attachments from .eml files in given directory.

Iranian AFTA release of IoCs related to APT15 campaign in Iran

RDL的堆溢出导致的RCE

No description.

WireGuard VPN installer for Linux servers

Check LTE Network Cipher Support -- over the air

A TUI client for Avanza, developed mainly as an interface for LLM based automation in trading and management of assets. It can also work as an MCP server.

DarkSword exploit chain dump.

Various tips & tricks

Service: Quagga in support of vRouter

deobfuscated JS and blobs from https://b27[.]icu, first attempt at using claude

Mesh based VPN architecture to facilitate secure internet access over Starlink for domestic and mobile users in Iran, during mass outage times. This is an experimental project and requires technical skills to understand, deploy and troubleshoot.

🦄 A curated list of privacy & security-focused software and services. Farsi machine translation fork for amni.at website.

Example nginx backdoor via malicious plugin

ODAT: Oracle Database Attacking Tool

Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.

Exposing CharmingKitten's malicious activity for IRGC-IO Counterintelligence division (1500)

No description.

ELEGANTBOUNCER is a detection tool for file-based mobile exploits. This fork adds multiple new features including iMessage and other IM apps attachments extraction and scanning. Check IMPROVEMENTS.md for more details

Artifacts for "Phoenix: Rowhammer Attacks on DDR5 with Self-Correcting Synchronization" (IEEE S&P '26)

A fork of https://codeberg.org/joelkoen/wtfps-dump

Python codes of my blog.

No description.

Unofficial and insecure Signal app, used by senior Trump officials like Mike Waltz, downloaded from the official TeleMessage website

A fork of wtfps on codeberg

Experimenting with Apple's WPS location service

A IDA Pro 9.0 Beta 2 macOS x86 Fix Loader

Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement

拼多多apk内嵌提权代码，及动态下发dex分析

A Ghidra script for automating extraction of registered routes in golang binaries

Signature maker plugin for IDA 8.x and 9.x

No description.

Veil Evasion is no longer supported, use Veil 3.0!

Veil 3.1.X (Check version info in Veil at runtime)

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

Script designed to identify Canary Tokens within Microsoft Office documents and Acrobat Reader PDF (docx, xlsx, pptx, pdf).

python driver for fingerprint machine (ZKTeco biometrics)

Credentials recovery project

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

This is my personal wiki for hacking the router firmware used by (Sagemcom)F@ast Version 3.43.2 delivered from Sagemcom

NAT Slipstream attack code samples

No description.

No description.

Custom queries list for BloodHound

List of ngrok alternatives and other ngrok-like tunneling software and services. Focus on self-hosting.

No description.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

A tool to exploit .NET Remoting Services

Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk

kill anti-malware protected processes (BYOVD)

Interesting APT Report Collection And Some Special IOC

This is fork of OpenVPN project. DO NOT USE THIS REPOSITORY!

[DONT USE THIS FORK!] The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).

unarcrypto is an educational tool to depict cryptography usage in zip, rar and 7zip archives

Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.

Jansi is a small java library that allows you to use ANSI escape sequences to format your console output which works even on windows.

Home repository for .NET Core

OWASP Dependency Check build releases

Empire is a PowerShell and Python post-exploitation agent.

PowerShell Scripts I find useful

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14882、CVE-2020-14883

OpenVPN road warrior installer for Debian, Ubuntu and CentOS

A toy socks 5 server written in Python

nothing to see here.

RoR / Devise PoC in memory Backdoor

Kerberos unconstrained delegation abuse toolkit

visualize your iptables firewall

Fork of Matasano's flint

No description.

A private Lumina server for IDA Pro

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

PowerShell SOCKS proxy with reverse proxy capabilities

A PowerShell TCP/IP swiss army knife.

netshell features all in version 2 powershell

Patch of checkra1n 11.0 to enable jailbreak for A10 and A11 devices running iOS 14.

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible the process of setting up and maintaining the server.

The BUSSide Badge

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

APT34/OILRIG leak

Burp Suite Logger++: Log activities of all the tools in Burp Suite

Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

This program show you IMSI numbers of cellphones around you.

MrsPicky - An IDAPython decompiler script that helps auditing calls to the memcpy() and memmove() functions.

No description.

Burp Suite AMF Extension

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFI pwning.

Apple BLE research

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

Weblogic CVE-2019-2725 CVE-2019-2729 Getshell 命令执行

POI exploitation!

No description.

Use Touch ID / Secure Enclave for SSH Authentication!

Examples for Distal (Paxos inside)

The Shadow Brokers "Lost In Translation" leak

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

ROCA (Censys.io patch): Infineon RSA vulnerability

Generating PEM files from Censys.io x509 JSON scan databases.

taken as-is from http://rejava.sourceforge.net/ (2016-09-19)

SpiderFoot, the open source footprinting and intelligence-gathering tool.

ZeroNet - Decentralized websites using Bitcoin crypto and BitTorrent network

Mass scanner for the Java serialize bug

Vulnerability Labs for security analysis

No description.

No description.

SmartThings open-source DeviceTypeHandlers and SmartApps code

Decrypted content of eqgrp-auction-file.tar.xz

IDA Sploiter is a plugin for Hex-Ray's IDA Pro disassembler designed to enhance IDA's capabilities as an exploit development and vulnerability research tool.

Random dump of interesting stuff from the Equation Drug leak

SCTP network scanner for discovery and security

Rogue GSM BTS For Fun And Profit

Automate XPath injection attacks to retrieve documents

Network Mapper - Security Scanner

Inception is a FireWire physical memory manipulation and hacking tool exploiting IEEE 1394 SBP-2 DMA. The tool can unlock (any password accepted) and escalate privileges to Administrator/root on almost any powered on machine you have physical access to. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.

Official FuzzDB project repository

No description.

Automatic Server-Side Template Injection Detection and Exploitation Tool

A post-exploitation powershell tool for extracting juicy info from memory.

Performs method enumeration and interrogation against flash remoting end points.

VSAQ is an interactive questionnaire application to assess the security programs of third parties.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Nishang - PowerShell for penetration testing and offensive security.

Ruby interface to the IDology API

No description.

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Convert OpenVPN profiles to an APC file that can be imported into a Sophos/Astaro UTM

An Android NFC-App for reading, writing, analysing, etc. Mifare Classic RFID-Tags.

Some tools used in the Ruxcon / Kiwicon presentation "Breaking Bricks and Plumbing Pipes: Cisco ASA a Super Mario Adventure."

No description.

Pupy is a remote administration tool with an embeded Python interpreter, allowing its modules to load python packages from memory and transparently access remote python objects. The payload is a reflective DLL and leaves no trace on disk

No description.

Patch PE, ELF, Mach-O binaries with shellcode

Simple file uploading and sharing, source for the now shut down site Pomf.se

hydra

A Powershell port of dnscat2, a DNS covert channel tool.

PowerSploit - A PowerShell Post-Exploitation Framework

This is a webshell open source project

No description.

Proxmark 3