nmg
baguette168/nmgGenerates parameterized .NET memory-shell payloads (VPP, MVC route, HttpListener) compatible with Godzilla, Behinder, and AntSword clients for red…
defensive-toolspayload-developmentpayload-generation+8
15
baguette168/nmgGenerates parameterized .NET memory-shell payloads (VPP, MVC route, HttpListener) compatible with Godzilla, Behinder, and AntSword clients for red…
xpn/randomtsscriptsCollection of RedTeam engagement scripts including Pre2K default credential checks via TGS, LAPSv2 password decryption, and IIS App Pool credential…
boroeurnprach/ashwesker-cve-2026-21962Exploit PoC and Nuclei template for CVE-2026-21962, a critical unauthenticated remote code execution in Oracle HTTP Server and WebLogic Proxy…
0xbruno/wsusploit.netC# proof-of-concept for CVE-2025-59287 targeting WSUS, demonstrating exploitation and providing defensive detection guidance for IIS logs and Windows…
nvisosecurity/interceptorInterceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
berraesen/nextjs-middleware-auth-bypass-labBu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile…
mauricelambert/cve-2021-31166CVE-2021-31166: exploitation with Powershell, Python, Ruby, NMAP and Metasploit.
edubr2020/realplayer_g2_rceProof-of-concept exploit for a Remote Code Execution vulnerability in RealPlayer G2 ActiveX control, leveraging javascript: and mhtml: URIs to…
hackingdave/btrpa-scanBluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs)
mseymend/cve-2024-21413CVE-2024-21413 Açığını Kullanarak Giriş Bilgilerini Alma
nu11secur1ty/iis-backdoorStealthy IIS backdoor using hidden ISAPI filter for persistent remote access, data exfiltration, and on-the-fly exploit injection via custom HTTP…
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
midisec/cve-2023-36899CVE-2023-36899漏洞的复现环境和工具，针对ASP.NET框架中的无cookie会话身份验证绕过。
mauricelambert/cve-2022-21907CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and…
nika0x38/cve-2017-7269A Rust implementation of the POC for CVE-2017-7269, targeting the WebDAV service in Microsoft Internet Information Services (IIS) 6.0.
p0dalirius/cve-2022-21907-http.sysProof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers
stevenvegar/cve-2000-0649Script fo testing CVE-2000-0649 for Apache and MS IIS servers