backcookie
jofpin/backcookiePHP backdoor that receives commands via HTTP cookie, providing remote shell access to compromised web servers with custom command support.
command-and-controlpayload-generationpenetration-testing+3
64
jofpin/backcookiePHP backdoor that receives commands via HTTP cookie, providing remote shell access to compromised web servers with custom command support.
cobbr/c2bridgeFramework for building custom command-and-control protocols and integrating them with the Covenant C2 platform, enabling rapid development of…
cyberstruggle/chalumeauAutomated credential dumping tool with custom PowerShell payloads, in-memory execution, Mimikatz parsing, ticket dumping, and web-based dashboard for…
xret2pwn/picklec2Encrypted C2 framework for post-exploitation and lateral movement, supporting PowerShell implants and custom modules for red team engagements.
nccgroup/async-pico-hubEvent-driven asynchronous BOF execution framework for Cobalt Strike Beacon. Enables long-running custom event monitoring and real-time output from…
nu11secur1ty/iis-backdoorStealthy IIS backdoor using hidden ISAPI filter for persistent remote access, data exfiltration, and on-the-fly exploit injection via custom HTTP…
warferik/cve-2019-3980Proof-of-concept exploit for CVE-2019-3980 enabling remote command execution via custom C# payload with HTTP callback for output retrieval.
noxtal/follinaProof-of-concept exploit for CVE-2022-30190 (Follina) enabling remote code execution via Microsoft Support Diagnostic Tools in Office, with reverse…
tc4dy/cve-2026-41940-poc-exploit🚀 CVE-2026-41940 cPanel/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy,…
dynamo2k1/cve-2026-33017PoC exploit for CVE-2026-33017: unauthenticated remote code execution in Langflow via malicious Python Custom Component injection, with built-in…
diegogarciayala/cve-2024-24590-clearml-rce-cmd-pocPython exploit for CVE-2024-24590 that uploads a malicious pickle file to ClearML, enabling reverse shell or custom command execution on the target…
mrknow001/cve-2022-22947Python-based exploit tool for CVE-2022-22947 (Spring Cloud Gateway SpEL injection). Supports single-target and batch scanning with custom command…
jeanback1/cve-2022-25765-exploitPython exploit for CVE-2022-25765 command injection in pdfkit, enabling remote code execution via crafted URLs with reverse shell and custom command…
00xcanelo/cve-2025-32778Python PoC for CVE-2025-32778, exploiting command injection in Web-Check's screenshot API to execute reverse shells or custom shell commands against…
xbufu/cve-2007-2447Python3 exploit for CVE-2007-2447 targeting Samba 3.0.20-3.0.25rc3 with Netcat reverse shell and custom command execution support.
joshuavanderpoll/cve-2022-30190Python script generating Microsoft Office documents that exploit CVE-2022-30190 for remote code execution via HTML payloads, supporting custom…
ysfcndgr/react2shell-cve-2025-55182-advanced-scannerAutomated scanner for CVE-2025-55182 RCE in Next.js with 8 WAF bypass techniques, custom command execution, and test-only detection mode for…
lonecloud/cve-2021-44228-apache-log4jProof-of-concept exploit for CVE-2021-44228 (Log4Shell) demonstrating remote code execution via JNDI injection with LDAP server and custom payload…