Sharp-SMBExec
checkymander/sharp-smbexecC# implementation of SMBExec for remote command execution on Windows targets using NTLM password hashes, enabling lateral movement and pass-the-hash…
authenticationexploitationlateral-movement+1
216
checkymander/sharp-smbexecC# implementation of SMBExec for remote command execution on Windows targets using NTLM password hashes, enabling lateral movement and pass-the-hash…
soy-oreocato/cve-2022-42176Proof-of-concept for CVE-2022-42176: hard-coded credentials in PCSecure configuration file allow local privilege escalation to admin panel and…
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
obscura-cert/cve-2025-33073Proof-of-concept tool that chains DNS injection, NTLM relay, and RPC-based coercion to test authentication relay paths in Windows Active Directory…
dazzyddos/lsawhisper-bofA Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without…
dirkjanm/mitm6Exploits Windows IPv6 default configuration to spoof DNS via DHCPv6, redirecting victim traffic for credential relaying and man-in-the-middle attacks…
scorpioneslabs/mssqlpwnerAdvanced MSSQL penetration testing tool for lateral movement, command execution, NTLM relay, and brute-force attacks via linked servers and multiple…
blue0x1/nimrmNative Nim WinRM shell with NTLM, Kerberos, file transfer, in-memory helpers, and AD/OPSEC reporting
spiderlabs/fireworkFirework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.
adityatelange/evil-winrm-pyExecute commands interactively on remote Windows machines using the WinRM protocol (just faster)
max-rh/sshelfFast terminal UI for your SSH hosts: fuzzy-search and connect in two keystrokes, dual-pane SFTP file transfer, and background port forwarding. Keeps…
watchtowrlabs/fortios-auth-bypass-poc-cve-2024-55591Proof-of-concept exploit for CVE-2024-55591, demonstrating authentication bypass in FortiOS management interfaces via WebSocket race condition to…
synacktiv/mobileiron-exploitPython script to exploit the OWASSRF + TabShell chain on vulnerable Microsoft Exchange servers, leveraging Kerberos authentication for command…
openssh/openssh-portablePortable OpenSSH
hpt-intern-task-submission/cve-2022-46169Step-by-step analysis of CVE-2022-46169: unauthenticated remote code execution in Cacti via authentication bypass and command injection, with Docker…
gitgudkrish/cve-2025-29927-nextjsEducational demo of CVE-2025-29927, a critical Next.js middleware authentication bypass. Includes a vulnerable admin panel, proof-of-concept exploit…
cyberency/cve-2025-6514mcp-remote exposed to OS command injection
sensepost/susinternalspsexecsvc - a python implementation of PSExec's native service implementation