Tools

ytkoka/impersonate-proxy

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508

Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.

aramosf/cve-2026-54433

Configurable Python PoC for CVE-2026-54433, a stored XSS in Roundcube's plain-text email renderer. Generates crafted .eml, sends via SMTP, and…

e-fin/pypspipejack

Python implementation of OpenPsPipeJack

hxlxmj/cve-2025-26264

CVE-2025-26264 - GeoVision GV-ASWeb with the version 6.1.2.0 or less, contains a Remote Code Execution (RCE) vulnerability within its Notification…

dec0ne/krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

s1ckb0y1337/tokenplayer

Manipulating and Abusing Windows Access Tokens.

codextf2/cobaltstrike-headless

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

antoniococo/runascs

RunasCs - Csharp and open version of windows builtin runas.exe

eversinc33/sharpstartwebclient

Programmatically start WebClient from an unprivileged session to enable that juicy privesc.

wh0amitz/petitpotato

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

zblurx/impersonate-rs

Rusty Impersonate

tdragon6/supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

foxlox/giuda

Ask a TGS on behalf of another user without password

wkl-sec/dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

mzhmo/powershellkerberos

Some scripts to abuse kerberos using Powershell