Tools

naksyn/processstomping

A variation of ProcessOverwriting to execute shellcode on an executable's section

iilegacyyii/datainject-bof

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll

klezvirus/rpcproxyinvoke

Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar

buzzer-re/shinigami

A dynamic unpacking tool

infobyte/exploit-cve-2021-21086

Python-based exploit for CVE-2021-21086 in Adobe Acrobat Reader DC, generating malicious PDFs with shellcode execution via crafted font charstrings.

therealdreg/nasm_linux_x86_64_pure_sharedlib

NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection

aydinnyunus/cve-2024-24576-exploit

CVE-2024-24576 Proof of Concept

trungnguyen1909/cve-2019-8781-macos

Exploit POC for the bug CVE-2019-8781, found by @LinusHenze

mind2hex/cve-2023-38035-mobileiron-rce

Script to exploit CVE-2023-38035

fengzhouc/cve-2021-21300

Proof-of-concept exploit for CVE-2021-21300, demonstrating remote code execution via malicious git repository cloning with symlink and filter abuse…

optiv/scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

powershellmafia/powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

joxeankoret/cve-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

memn0ps/venom-rs

Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)

hfiref0x/stryker

Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303