Tools

forrest-orr/artifacts-kit

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

vichhka-git/renef-skills

Agent Skill for operating renef.io — Android ARM64 dynamic instrumentation: hook native/Java, patch memory, trace syscalls, bypass SSL pinning/root…

roronoawjd/hook

CVE-2024-32002 hook POC

jbaines-r7/hook

Proof of Concept for WatchGuard Authenticated Arbitrary File Read (CVE-2022-31749)

eqstlab/hook

submodule for git_rce

10cks/hook

CVE-2024-32002-hook

masamuneee/hook

This is a demo for CVE-2024-32002 POC

wooooong/hook

PoC Exploit for CVE-2024-32002

fadhilthomas/hook

part of poc cve-2024-32002

rofl0r/proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…

shinthink/cve-2026-60004

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

p0dalirius/cve-2020-14144-gitea-git-hooks-rce

A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks

oldkingcone/byosi

Evade EDR's the simple way, by not touching any of the API's they hook.

hwbp/clr-unhook

Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan in-memory…

imbas007/cve-2026-60004-poc

CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)

dsnezhkov/octohook

Git Web Hook Tunnel for C2

saku0512/cve-2026-54686-poc

Local PoC for CVE-2026-54686 demonstrating DCS lifecycle hook spoofing in Warp terminal. Simulates spoofed CWD and SSH metadata acceptance in…

gagaltotal/cve-2026-60004-poc-gitea

CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection