
PoC_CVE-2019-10149--rce
Remote Command Execution into shell from a vulnerable exim service.

Remote Command Execution into shell from a vulnerable exim service.

Automated Reverse Shell Exploit via WebSocket | Havoc-C2-SSRF with RCE

Proof-of-concept exploit for CVE-2024-8190, an authenticated command injection vulnerability in Ivanti Cloud Service Appliance, enabling remote…


On-demand reverse shell service that auto-detects target environment and executes appropriate payload for remote access during penetration tests.

** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for…

Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service…

A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…

Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service

Educational guide and code repository for understanding APT attack techniques, covering reconnaissance, web and service exploitation, trojans, C2,…

Adaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.

Proof-of-concept backdoor for SCCM Management Point using rogue COM service for persistent remote command execution as SYSTEM.

Mythic C2 profile that tunnels Athena and Apollo agent traffic through Telegram bot-to-bot messages, bridging encrypted payloads to Mythic via its…

Proof of concept exploit code for CVE-2020-7388, an unauthenticated RCE as SYSTEM on Sage X3's AdxDSrv Service

Python3 exploit script for VSFTPD 2.3.4 backdoor command execution (CVE-2011-2523) that connects to the target FTP service and spawns a shell using…

Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075

Windows service agent for CALDERA adversary emulation platform. Installed on target computers to communicate with the CALDERA server, enabling…

Remote administration service which uses twitter as a command and control server