Repositories list

• WiFIChallengeLab-STMAcademy

  Public
  WiFi hacking Lab. Virtualized WiFi pentesting laboratory without the need for physical WiFi cards, using mac80211_hwsim and vwifi proyect.

  Shell

  •

  GNU General Public License v3.0

  •7•1•0•0•Updated May 29, 2023May 29, 2023

• CVEs

  Public
  A collection of proof-of-concept exploits for publicly disclosed vulnerabilities discovered by the STM Cyber team.

  Python

  •1•6•0•0•Updated Feb 21, 2022Feb 21, 2022

• CTF-writeups

  Public
  Writeups for challenges solved by STM Cyber employees and friends

  Python

  •0•3•0•0•Updated Jan 20, 2022Jan 20, 2022

• PoShI

  Public
  A simple Java application vulnerable to PowerShell code injection under certain conditions (e.g. when executed on japanese Windows)

  Java

  •1•2•0•0•Updated Sep 14, 2021Sep 14, 2021

• boobsnail

  Public
  BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.

  obfuscationpentestingpentest+ 8blueteammsofficesocial-engineeringredteamexcel-macrosxlm-macroexcel4+ 1

  Python

  •

  MIT License

  •51•255•3•0•Updated May 26, 2021May 26, 2021

• Awesome-Excel4.0

  Public
  List of Awesome Excel4.0/XLM tricks and functions useful for Red Team and Blue Team. This list is for anyone wishing to learn about Excel4.0/XLM for Red Team but do not have a starting point.

  macrocheatsheetsexcel4+ 3obfuscationxlminsert-macro-sheet

  MIT License

  •3•36•0•0•Updated Apr 27, 2021Apr 27, 2021

• RmiTaste

  Public
  RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets from ysoserial.

  java-rmiattackgadgets+ 3security-professionalsysoserialrmi-service

  Java

  •

  MIT License

  •22•106•1•0•Updated Oct 10, 2020Oct 10, 2020

• RmiServerExample

  Public
  Java

  •

  MIT License

  •1•2•0•0•Updated Sep 28, 2020Sep 28, 2020