Skip to content

@synacktiv Synacktiv

Change the repository type filter

All

    Repositories list

    84 repositories

    • adb_client

      Public
      Rust ADB client
      Rust
      •
      MIT License
      •4•18•1•0•Updated Jan 22, 2025Jan 22, 2025

    • octoscan

      Public
      Octoscan is a static vulnerability scanner for GitHub action workflows.
      githubexploitvulnerabilitycicdgithub-actions
      Go
      •
      GNU General Public License v3.0
      •12•188•3•3•Updated Jan 21, 2025Jan 21, 2025

    • shh

      Public
      Systemd Hardening Helper - Mirror of https://github.com/desbma/shh
      Rust
      •
      GNU General Public License v3.0
      •1•111•1•0•Updated Jan 17, 2025Jan 17, 2025

    • CVE-2024-43468

      Public
      Python
      •8•67•0•0•Updated Jan 16, 2025Jan 16, 2025

    • QLinspector

      Public
      Finding Java gadget chains with CodeQL
      CodeQL
      •
      GNU General Public License v3.0
      •20•166•1•0•Updated Jan 14, 2025Jan 14, 2025

    • bbs

      Public
      bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or chains of proxies based on the request's target. Routing can be configured with a PAC script (if built with PAC support), or through a JSON file.
      Go
      •4•83•0•0•Updated Jan 9, 2025Jan 9, 2025

    • AADOutsider-py

      Public
      Python3 rewrite of AsOutsider features of AADInternals
      Python
      •
      MIT License
      •4•39•0•0•Updated Dec 20, 2024Dec 20, 2024

    • SCCMSecrets

      Public
      SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.
      Python
      •19•184•0•0•Updated Dec 17, 2024Dec 17, 2024

    • DepFuzzer

      Public
      Python
      •
      MIT License
      •6•51•1•0•Updated Dec 17, 2024Dec 17, 2024

    • nmap-farewell

      Public
      Automated Network Security with Rust: Detecting and Blocking Port Scanners
      Rust
      •
      GNU General Public License v3.0
      •1•1•0•0•Updated Dec 6, 2024Dec 6, 2024

    • CVE-2023-32413

      Public
      Exploit code for CVE-2023-42914 / pwn2own Vancouver 2023
      C
      •1•11•0•0•Updated Nov 22, 2024Nov 22, 2024

    • nord-stream

      Public
      Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.
      githubgitlabgitlab-cici-cdcicdazuredevops
      Python
      •
      GNU General Public License v3.0
      •16•266•0•1•Updated Nov 21, 2024Nov 21, 2024

    • laravel-crypto-killer

      Public
      A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.
      Python
      •
      MIT License
      •1•22•0•0•Updated Nov 12, 2024Nov 12, 2024

    • GPOddity

      Public
      The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
      Python
      •22•269•1•0•Updated Nov 8, 2024Nov 8, 2024

    • action-octoscan

      Public
      📦 :octocat: A GitHub Action that performs a security scan of your GitHub Actions.
      githubsecurityscancicdgithub-actions
      Shell
      •
      GNU General Public License v3.0
      •1•26•0•0•Updated Oct 28, 2024Oct 28, 2024

    • eos

      Public
      Enemies Of Symfony - Debug mode Symfony looter
      Python
      •
      Other
      •50•324•0•1•Updated Oct 18, 2024Oct 18, 2024

    • gh-hijack-runner

      Public
      A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
      githubrunnercicdexploitationgithubactions
      Python
      •4•21•0•0•Updated Oct 13, 2024Oct 13, 2024

    • CVE-2024-45409

      Public
      Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit
      Python
      •14•75•0•0•Updated Oct 7, 2024Oct 7, 2024

    • krbrelayx

      Public
      Kerberos unconstrained delegation abuse toolkit
      Python
      •
      MIT License
      •178•0•0•0•Updated Oct 3, 2024Oct 3, 2024

    • garble

      Public
      Obfuscate Go builds
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •271•0•0•0•Updated Sep 25, 2024Sep 25, 2024

    • kcmdump

      Public
      Dump Kerberos tickets from the KCM database of SSSD
      Python
      •5•49•0•0•Updated Sep 8, 2024Sep 8, 2024

    • veeam-velociraptor

      Public
      Proof-of-concept Velociraptor artifacts pack to showcase a remote Veeam forensics pipeline.
      GNU Affero General Public License v3.0
      •0•0•0•0•Updated Aug 27, 2024Aug 27, 2024

    • hexalocker-analysis

      Public
      HexaLocker ransomware analysis
      YARA
      •
      GNU Affero General Public License v3.0
      •0•3•0•0•Updated Aug 23, 2024Aug 23, 2024

    • ntdissector

      Public
      Python
      •
      Other
      •16•131•4•5•Updated Aug 16, 2024Aug 16, 2024

    • frinet

      Public
      Frida-based tracer for easier reverse-engineering on Android, iOS, Linux, Windows and most related architectures.
      C
      •
      MIT License
      •46•491•5•0•Updated Aug 7, 2024Aug 7, 2024

    • CacheData_decrypt

      Public
      A simple Toolkit to BF and decrypt Windows EntraId CacheData
      Python
      •0•13•0•0•Updated Jun 20, 2024Jun 20, 2024

    • DLHell

      Public
      Local & remote Windows DLL Proxying
      Python
      •23•161•0•0•Updated Jun 17, 2024Jun 17, 2024

    • mobileiron-exploit

      Public
      Python
      •0•6•0•0•Updated Jun 4, 2024Jun 4, 2024

    • php_filter_chains_oracle_exploit

      Public
      A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.
      Python
      •
      Other
      •18•251•0•0•Updated Jun 2, 2024Jun 2, 2024

    • Invoke-RunAsWithCert

      Public
      A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.
      PowerShell
      •13•132•1•0•Updated May 13, 2024May 13, 2024