Red Teaming

vysecurity/cve-2018-4878

Aggressor Script to launch IE driveby for CVE-2018-4878

hac01/owasp-top-10-k8s-2025

Hands-on capture-the-flag lab for the OWASP Kubernetes Top 10 (2025). Exploit 11 real-world cluster weaknesses, capture flags, then apply fixes and…

secdev02/easytokens

Kali365 - EvilTokens Replica

techryptic/pokemon-shellcode-loader

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

truneski/external_c2_framework

Python api for usage with cobalt strike's External C2 specification

vnhacker1337/cve-2022-27925-poc

Zimbra RCE simple poc

bytecode77/slui-file-handler-hijack-privilege-escalation

Slui File Handler Hijack UAC Bypass Local Privilege Escalation

hyd3sec/azur3alph4

PowerShell module for post-breach Azure red teaming, automating token extraction, resource enumeration, and lateral movement within managed identity…

horizon3ai/cve-2023-27532

Proof-of-concept exploit for CVE-2023-27532 in Veeam Backup and Replication that abuses an unsecured API endpoint to extract credentials from the…

xret2pwn/picklec2

Encrypted C2 framework for post-exploitation and lateral movement, supporting PowerShell implants and custom modules for red team engagements.

mwr-cybersec/veeamdumper-bof

A credential extraction BOF for Veeam Backup and Replication and Veeam One

mohemiv/tcltools

Сollection of TCL scripts for Cisco IOS penetration testing

mirchr/security-research

Security Research

p0dalirius/mssql-analysis-coerce

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

brianwrf/sambahunter

It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).

thiagopeixoto/winsos-poc

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.