Payload Generation

g0rx/cve-2018-7600-drupal-rce

PoC exploit collection for CVE-2018-7600 Drupal RCE with multiple scripts targeting Drupal 7 and 8, including mass exploitation variants.

jas502n/cve-2019-11581

Atlassian JIRA Template injection vulnerability RCE

secretsquirrel/recomposer

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

cyberxml/log4j-poc

A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell

catzsec/forceadmin

⚡ Create infinite UAC prompts forcing a user to run as admin ⚡

billythegoat356/kramer

The next level 100% Python obfuscator.

blacknbunny/mcreator

Encoded Reverse Shell Generator With Techniques To Bypass AV's

s0lst1c3/dropengine

DropEngine provides a malleable framework for creating shellcode runners, allowing operators to choose from a selection of components and combine…

alienwithin/owasp-mth3l3m3nt-framework

OWASP Mth3l3m3nt Framework is a penetration testing aiding tool and exploitation framework. It fosters a principle of attack the web using the web as…

theori-io/cve-2016-0189

Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)

dviros/rat-via-telegram

Windows Remote Post Breach Tool via Telegram

pinoywh1z/c99shell-php7

PHP 7 and safe-build Update of the popular C99 variant of PHP Shell.

malwareman007/scanner-and-patcher

A Web Vulnerability Scanner and Patcher

jas502n/cve-2019-11580

Python exploit for CVE-2019-11580, a remote code execution vulnerability in Atlassian Crowd and Crowd Data Center. Uploads a malicious plugin to…

nodauf/swego

Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features

ggyao/cve-2020-14882_all

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。