Tools

codewhitesec/lastenzug

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

n00py/hwacha

Deploy payloads to *Nix systems en masse

florylsk/execit

Execute shellcode files with rundll32

mhdgning131/teletunnel

Bypassing EDR's with stealthy c++ telegram Bot and Telegram itself as C2 interface !

hadimed/kingsoft-wps-office-lpe

CVE-2022-25943

maldevel/dicerosbicornis

A fully featured Windows backdoor that uses email as a C&C server

agampreet-singh/redroot

RedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…

ps1337/lastenzug

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

dereeqw/netspy

NetSpyC2 – Python C2 Server with RSA Key Exchange and AES-GCM Encrypted Sessions

inferiorak/cve-2025-55182-react2shell-async-scanner

Async RCE scanner for CVE-2025-55182 / CVE-2025-66478 — prototype-pollution → code execution via React Server Actions.

umbertodellamonica/linksys-wrt54gl-exploitation

From Solder to Shell: Full Hardware Exploitation of the Linksys WRT54GL Router (CVE-2022-43973)

godoy-sec/cve-2017-14980

Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes.

liyuxuan504-byte/cve-2026-14266

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap

hunt-benito/lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce

CVE-2026-8836 — lwIP SNMPv3 stack-based buffer overflow PoC (CVSS 9.8)

barroqueiro/cve-2023-37941

Exploit on the default cache of superset by using pickle

hann1bl3l3ct3r/fuxapwn

POC exploit for CVE-2026-25895 FUXA Unauthenticated Path Traversal -> Arbitrary File Write -> RCE

alberto-galindo/cve-2025-5548

Security research and reproduction of CVE-2025-5548: A stack-based buffer overflow in FreeFloat FTP Server 1.0. Includes binary analysis, crash…

jeanpt/cve-2023-34468

CVE-2023-34468 - Apache NiFi H2 RCE PoC