endgame
endgamec2framework/endgameENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations
privilege-escalationreconnaissanceexploit-frameworks+8
28
Tools for creating and customizing malicious code or instructions to execute after exploitation.
endgamec2framework/endgameENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations
webshellseo8/cve-2026-53787-poc-
saiteja-erukude/cve-2026-47103-python-statemachine-rcePython StateMachine 3.0.0 < 3.2.0 RCE via unsafe SCXML <data expr> evaluation and Python eval() injection.
saiteja-erukude/cve-2026-9147-uproot-rceuproot <= 5.7.4 code injection via unsafe Python source generation from ROOT TStreamerInfo metadata.
daemoncibsec/mcpexecPOC for CVE-2026-23744 for a python revshell
oguzylmzx/cve-2025-64512-pdfminer-pocPoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF
kimdir01/cve-2026-9090-pocPoC for CVE-2026-9090 — Casdoor SAML signature bypass (CWE-347). Reproduction-only; coordinated via CERT/CC VU#780781.
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
4minx/cve-2026-14266CVE-2026-14266 - XZ Heap Buffer Overflow PoC Generator for 7-Zip
4minx/cve-2026-50522CVE-2026-50522 PoC
d7ead/mkpivmGenerate polymorphic, position-independent virtual machines (PIVMs) from arbitrary x86/x64 shellcode.
lolw0/opensta-exploitProof of Concept (PoC) of CVE-2025-69212 related with P7M File Processing
miscusi-peek/cheatengine-mcp-bridgeConnect Cursor, Copilot & Claude AI directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using…
hunt-benito/the-sanitizer-is-the-weapon-cve-2026-68749-cve-2026-68750-quadratic-dos-in-elixir-html-sanitize-exPoC demonstrating quadratic DoS in Elixir html_sanitize_ex via crafted HTML; includes timing benchmarks, remote exploitation curl, and verification…
alyaapm/cve-2025-55182-shellinteractive
yora1928/cve-2026-48908-by-yoraPassive security checker for CVE-2026-48908 affecting SP Page Builder.
gutierre0x80/cve-2026-59827Technical analysis and proof of concept for CVE-2026-59827, a critical unsafe Java deserialization vulnerability in Metabase leading to remote code…
azeemidrisi/phonesploit-proAn all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.