Anvil
shellkraft/anvilAnvil is a runtime-first attack surface assessment tool for Windows thick client applications, built for penetration testers and security researchers…
binary-analysisexploitationpenetration-testing+5
37
shellkraft/anvilAnvil is a runtime-first attack surface assessment tool for Windows thick client applications, built for penetration testers and security researchers…
416rehman/deepzeroFind zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows…
vu-ls/crassusWindows privilege escalation discovery tool that parses Process Monitor boot logs to identify DLL hijacking, weak ACLs, and other elevation paths,…
cyberark/evasorA tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
trailofbits/rpcinvestigatorWindows RPC interface discovery and analysis tool with visual endpoint enumeration, PE parsing, symbol resolution, real-time ETW sniffing, and…
ctxis/dllhscAutomated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…
sec-tools/litefuzzA multi-platform fuzzer for poking at userland binaries, network clients and servers
ugvxb/cve-2026-9490The ACCSvc service creates a Named Pipe with a weak Security Descriptor that allows any authenticated user to connect and send messages. When a…
tuo4n8/cve-2020-2950Proof-of-concept exploit for CVE-2020-2950, demonstrating AMF deserialization to Java deserialization in Oracle Business Intelligence, with debug…
shack2/javaserializetoolsJava反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞…
lab52io/leakedhandlesfinderLeaked Windows processes handles identification tool
nam3lum/msi-central_privescCVE-2022-38532 - Local Privilege Escalation vulnerability in MSI Center Application
skrkcb2/cve-2025-0851Proof-of-concept exploit for CVE-2025-0851, a file traversal vulnerability in Deep Java Library's tar/zip model extraction utility, enabling…
shauryae1337/cve-2024-44346Public Disclosure
joakimbulow/cve-2026-23907Proof-of-concept exploit for Apache PDFBox path traversal vulnerability (CVE-2026-23907), demonstrating arbitrary file write via malicious PDFs with…
trustedsec/coffloaderRun Beacon Object Files (BOFs) outside Cobalt Strike by parsing 64-bit COFF object files, with Beacon-compatible argument generation and helper…
iss4cf0ng/dotnetpeloaderA C# PE loader for x64 and x86 PE files.
jbaines-r7/thewayA tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)