
malvinci
This simple but powerful script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through…

This simple but powerful script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through…

Proof-of-concept exploit for CVE-2026-75604, an unauthenticated remote code execution in Windows-hosted Next.js apps, with callback-based command…

Proof-of-concept exploit for CVE-2026-33725, achieving remote code execution and arbitrary file read via H2 JDBC INIT injection in Metabase…

Proof of Concept for CVE-2026-0770 - Langflow Remote Code Execution

Automated proof-of-concept exploit for CVE-2021-44521, enabling remote code execution on Apache Cassandra via user-defined functions. Executes…

Exploit for MCPJam Inspector <=1.4.2 that triggers remote code execution via crafted HTTP requests, enabling unauthorized installation of MCP servers…

Investigation of CVE-2024-4577 exploitation and AsyncRAT deployment with DFIR artifacts, IoCs, and detection guidance.

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

SubSeven Legacy Official Source Code Repository

Venom is a library that meant to perform evasive communication using stolen browser socket

Self-healing RAT utilizing libp2p

Tools for maintaining access to systems and proof-of-concept demonstrations.

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with…


WORK IN PROGRESS. RAT written in C++ using Win32 API

A database of RAT collected from Internet

An example of a remote administration tool.