KrbRelay
cube0x0/krbrelayKerberos relay framework for Windows environments enabling authentication relay, privilege escalation, and lateral movement via LDAP, SMB, HTTP, and…
authenticationexploitationlateral-movement+2
cube0x0/krbrelayKerberos relay framework for Windows environments enabling authentication relay, privilege escalation, and lateral movement via LDAP, SMB, HTTP, and…
remmons-r7/rapid7-cve-2026-15409This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing…
luantak/toratToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
trustedsec/titanisWindows protocol library, including SMB and RPC implementations, among others.
eladshamir/rpc-backdoorA basic emulation of an "RPC Backdoor"
wh04m1001/diagtrackeopWindows privilege-escalation exploit abusing SeImpersonate via DiagTrack RPC, using Secondary Logon to get an INTERACTIVE token and gain SYSTEM.
crisprss/magicnetdefsSimilar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged processes to…
k3ystr0k3r/hadoop-yarn-rceApache Hadoop YARN ResourceManager - Unauthenticated RCE PoC
je5442804/wptaskscheduler_cve-2024-49039WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler
forrest-orr/doublestarA personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own…
jonny-jhnson/msrpc-to-attackA repository that maps commonly used attacks using MSRPC protocols to ATT&CK
p0dalirius/windows-coerced-authentication-methodsA list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various…
rteccybersec/raitriggerLocal SYSTEM auth trigger for relaying
deepinstinct/shimmePoC for Windows privilege escalation and code injection using OfficeClickToRun RPC and undocumented shim manipulation to inject DLLs into SYSTEM…
casp3r0x0/cve-2026-341590 Click RCE exploit for CVE-2026-34159 Lama.cpp RPC server
talha-nazeef-ahmed/alpc-enumeratorA Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.
sherlocksecurity/microsoft-cve-2022-26809-the-little-boyThe poc for CVE-2022-26809 RCE via RPC will be updated here.
talha-nazeef-ahmed/rpc-triageA zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.