Exploitation

r00t-3xp10it/msf-auxiliarys

My collection of metasploit auxiliary post-modules

jfmaes/sharpziprunner

Executes position independent shellcode from an encrypted zip

blacksnufkin/ghostdriver

yet another AV killer tool using BYOVD

synacktiv/php_filter_chains_oracle_exploit

A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.

kleiton0x00/redditc2

Abusing Reddit API to host the C2 traffic.

paranoidninja/brute-ratel-c4-community-kit

This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 (https://bruteratel.com/)

n4kedturtle/persistbof

A BOF to automate common persistence tasks for red teamers

maldev-academy/remotetlscallbackinjection

Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

killaboi/brokenpipe

Steam Client Service Local Privilege Escalation Vulnerability

thatcherclough/betterbackdoor

A backdoor with a multitude of features.

sailay1996/cdpsvclpe

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

s3cur3th1ssh1t/nim-runpe

A Nim implementation of reflective PE-Loading from memory

cellebrite-labs/ida_kernelcache

An IDA Toolkit for analyzing iOS kernelcaches.

cyb0r9/winspy

Generates Windows reverse shell backdoors with automatic IP poisoning, leveraging Metasploit for payload creation and Apache for delivery in…

s1kr10s/apache-struts-v4

Exploit script targeting 5 Apache Struts RCE vulnerabilities (CVE-2013-2251, CVE-2017-5638, CVE-2017-9805, CVE-2018-11776, CVE-2019-0230) with PHP…

dhmosfunk/cve-2023-25690-poc

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling…

shinthink/blitzstrike

MCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…