Tools for extracting sensitive data from compromised systems without detection.
ch4120n/cve-2026-15409Proof-of-Concept exploit for CVE-2026-15409 (SonicWall SMA 1000 RCE) via Erlang distribution over WebSocket. Achieves unauthenticated remote code…
kudaes/dumpyReuse open handles to dynamically dump LSASS.
hackedteam/rcs-dbDatabase components for RCS backend
cr4sh/s6_pcie_microblazePCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info
toanln-cov/cve-2026-66493The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions
withsecurelabs/garbagemanGarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
zerodaylab/powersploitPowerSploit - A PowerShell Post-Exploitation Framework
reverseclabs/physmem2profitPhysmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely
xret2pwn/teamsniperTeamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).
invicti-security/web-inf-path-travTool for helping in the exploitation of path traversal vulnerabilities in Java web applications
icyguider/moreimpacketexamplesMore examples using the Impacket library designed for learning purposes.
d3lb3/keefarcerebornA standalone DLL that exports databases in cleartext once injected in the KeePass process.
reveng007/sharpgmailc2Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol
ceramicskate0/sharpexchangeC# Tool to interact with MS Exchange based on MS docs
seifelsallamy/xssfireA standalone Blind XSS Script.
