
fakelogonscreen
Windows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…

Windows credential harvester that displays a fake logon screen, validates captured passwords against AD or local machine, and outputs them to console…

Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.

The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it…

Proof-of-concept exploit for CVE-2024-21413, a Microsoft Outlook remote code execution vulnerability. Demonstrates NTLM credential leakage and RCE…

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

Python script that acts like the original sudo binary to fool users into entering their passwords

Python script for sending e-mails with CVE-2023-23397 payload using SMTP