
evil-winrm-py
Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

Builds a root exploit for vivo/iQOO devices targeting CVE-2026-43499, leveraging kernel techniques like KASLR bypass and CFI manipulation to achieve…

Rust-based PoC using Windows fibers to execute in-memory code stealthily, hiding payload stacks from EDR by switching between control and payload…

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries

A Bind Shell Using the Fax Service and a DLL Hijack

PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

Using CVE-2023-21768 to manual map kernel mode driver

C++ self-Injecting dropper based on various EDR evasion techniques.

Generates initial access payloads abusing AddInProcess.exe via .NET deserialization, supporting HTA, VBA, JS, and CHM templates for in-memory code…

Nim-based proof-of-concept for CVE-2021-4034 (PwnKit), a local privilege escalation in polkit's pkexec, with embedded payload library for standalone…

Windows x86 PoC: Stack‑based buffer overflow with custom shellcode on legacy 32-bit Windows.

Exploit for CVE-2003-0264 based on pwntools and metasploit's windows/reverse_tcp

Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC

Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303

Cobalt Strike AggressorScripts CVE-2020-0796

Windows POC for CVE-2021-34427 affecting Birt Viewer

Modified .NET deserialization payload for CVE-2021-42321, based on ysoserial.net, that writes files and bypasses Windows Defender to target Microsoft…