Tools

octoberfest7/xll_phishing

XLL Phishing Tradecraft

mekitoci/cve-2023-6401

CVE-2023-6401 is a DLL hijacking vulnerability that allows attackers to execute arbitrary code by placing a malicious `dbghelp.dll` file in the…

samugit83/redamon

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with…

paulsec/twittor

A fully featured backdoor that uses Twitter as a C&C server

r3nhat/grat2

We developed GRAT2 Command & Control (C2) project for learning purpose.

frkngksl/hintinject

A PoC project for embedding shellcode to Hint/Name Table

thecryinggame/cve-2022-39197-rce

CVE-2022-39197 RCE POC

hackernese/sneakyexe

Automatic UAC-Bypassing for custom payloads during privilege escalation testing

cerbersec/ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

artemcyberlab/project-exploiting-cve-2024-27198-rce-vulnerability

In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution (RCE) attack on a vulnerable TeamCity server.

deepinstinct/dcomuploadexec

DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

showy-headteacher114/cve-2025-66398

Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.

softdeadlock/voron-crypto

Voron messenger crypto/protocol library (X3DH-lite + Double Ratchet, group sender-keys, onion transport) — external review requested

algo7/bluekeep_cve-2019-0708_poc_to_exploit

An Attempt to Port BlueKeep PoC from @Ekultek to actual exploits

beefproject/beef

The Browser Exploitation Framework Project

tennc/webshell

This is a webshell open source project