Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
boreas37/cve-2026-64638-poc-xss2shell-XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
loaxert/cve-2025-59528-pocPoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB
yzddmr6/java-shellcode-loader基于Java实现的Shellcode加载器
0xdak/cve-2026-68771_exploitUnauthenticated exploit for CVE-2026-68771, a pickle deserialization RCE in ComfyUI. Plants a crafted shard via /upload/image, triggers it through…
princeh4k/spring4shell-pocProof of Concept for exploiting the CVE-2022-22965 (Spring4Shell) vulnerability in an isolated environment, with Remote Code Execution (RCE)…
s3cur3th1ssh1t/nim_dinvokeD/Invoke implementation in Nim
phackt/wptsextensions.dllWptsExtensions.dll for exploiting DLL hijacking of the task scheduler.
tihanyin/pssw100avbA list of useful Powershell scripts with 100% AV bypass (At the time of publication).
paranoidninja/brute-ratel-c4-community-kitThis repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 (https://bruteratel.com/)
sailay1996/cdpsvclpeWindows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)
solomonsklash/sleepycryptA shellcode function to encrypt a running process image when sleeping.
bc-security/empireEncrypted C2 and post-exploitation framework for red teams, with modular PowerShell/Python/C#/Go agents, many offensive modules, and easy…
rosesecurity/anti-virus-evading-payloadsDuring the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system…
therealdreg/nasm_linux_x86_64_pure_sharedlibNASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection
whichbuffer/lockbit-black-3.0
winterknife/pinkpantherWindows x64 handcrafted token stealing kernel-mode shellcode
