Tools

jasperla/cve-2017-9101

Authenticated remote code execution exploit for PlaySMS 1.4 via CSV phonebook upload. Provides single-command and interactive shell modes for…

marcingadz/spring-rce-poc

Testing CVE-2022-22968

retr02332/cve-2020-7115

Create your malicious engine in seconds

adenkiewicz/cve-2006-3592

Exploit for Easy File Sharing FTP Server 3.5 on Win7 32

trustedsec/unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…

joelgmsec/invoke-stealth

Simple & Powerful PowerShell Script Obfuscator

0xhossam/killer

Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.

enelg52/kittystager

KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this project is to…

soledad208/cve-2018-10933

CVE-2018-10933 very simple POC

namazso/linux_injector

A simple ptrace-less shared library injector for x64 Linux

nbaertsch/nimvoke

Indirect syscalls + DInvoke made simple.

dump-guy/sc2pe

Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE

gildasio/wshlient

A simple tool to interact with web shells and command injection vulnerabilities

dump-guy/sc2elf

Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF

theleopard65/cve-2021-3156-baron-samedit

A simple Docker lab and Exploit setup for CVE-2021-3156 - "Baron Samedit".

oalabs/blobrunner

Quickly debug shellcode extracted during malware analysis

codextf2/customc2channeltemplate

template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.

nataliadiak/windows-x86-shellcode-poc

Windows x86 PoC: Stack‑based buffer overflow with custom shellcode on legacy 32-bit Windows.