Exploitation

bao7uo/rau_crypto

Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

aron-tn/mega-bot

[NEW] : Mega Bot ☣ Scanner & Auto Exploiter

jfmaes/trustjack

Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows

decrypto-org/rupture

A framework for BREACH and other compression-based crypto attacks

n1xbyte/donutcs

dem sharp donuts

sinsinology/cve-2023-20887

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

luemmelsec/apex

Azure Post Exploitation Framework

sgkdev/packet_edit_meme

PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare

tijldeneut/icssecurityscripts

Python scripts for security assessment of industrial PLCs: scanning, enumeration, control, and exploitation of Beckhoff, Siemens, Schneider,…

bao7uo/dp_crypto

Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)

rasta-mouse/crystal-loaders

A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike

s3cur3th1ssh1t/nimgetsyscallstub

Dynamically extracts fresh syscall stubs from ntdll.dll to evade signature-based detection, with a shellcode execution template for Nim-based…

illusionofchaos/ios-nehelper-wifi-info-0day

iOS 15 0-day exploit (still works in 15.0.2)

aniqfakhrul/sharperner

Simple executable generator with encrypted shellcode.

tyranid/ie11sandboxescapes

Some example source code for fixed IE11 sandbox escapes.

ridter/cve-2018-15982_exp

exp of CVE-2018-15982