zerodayevil/cve-2026-54121-certighostProof-of-concept module for CVE-2026-54121 (Certighost), exploiting AD CS enrollment validation via rogue LDAP/SMB listeners to impersonate a Domain…
foxglovesec/potatoWindows local privilege escalation exploit using NBNS spoofing, fake WPAD proxy, and HTTP-to-SMB NTLM relay to gain NT AUTHORITY\SYSTEM access.
starscow/cve-2025-33073PoC Exploit for the NTLM reflection SMB flaw.
portbuster1337/atlasCross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#
solarlynxsqueeze/cve-2026-32202Generates malicious LNK files to coerce Net-NTLMv2 hashes via Windows Shell UNC handling, with custom SMB listener and relay integration for…
xiaolichan/invoke-samspoofingCVE-2021-42287/CVE-2021-42278 exploits in powershell
f1r3k0/cve-2025-52136Exploit for CVE-2025-52136 enabling RCE on EMQX control panel via plugin upload, with MQTT-based command agent and SOCKS5 tunnel for out-of-band C2…
0xndi/cve-2026-24294Local privilege escalation PoC for CVE-2026-24294, abusing SMB arbitrary port and NTLM reflection to achieve SYSTEM on Windows Server 2025.
royhills/arp-scanFast ARP-based network scanner for discovering and fingerprinting IPv4 hosts on local networks, with vendor lookup, adjustable scan rates, and…
nettitude/runpeC# Reflective loader for unmanaged binaries.
dirkjanm/krbrelayxKerberos relaying and unconstrained delegation abuse toolkit
muraenateam/muraenaAutomates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…
0x4meliorate/mimicFrameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
pritunl/pritunlProvides distributed enterprise VPN connectivity using OpenVPN, with centralized management, authentication, and encrypted tunnels for cloud and…
ytkoka/impersonate-proxyA local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…
minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.
warpedatom/noisehoundDetection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers…
e-fin/pypspipejackPython implementation of OpenPsPipeJack
