Tools

cyberark/rpcmon

RPC Monitor tool based on Event Tracing for Windows

dywhoami/cve-2021-34527-scanner-based-on-cube0x0-poc

Scanner for Windows Print Spooler service vulnerability CVE-2021-34527, based on cube0x0's PoC, enabling detection of exploitable targets.

0x534a/dynmx

Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!

nataliadiak/windows-x86-shellcode-poc

Windows x86 PoC: Stack‑based buffer overflow with custom shellcode on legacy 32-bit Windows.

v-p-b/cve-2019-12750

Local privilege escalation exploit for Symantec Endpoint Protection (CVE-2019-12750) targeting x64 Windows systems, based on published vulnerability…

7bitsteam/exch_cve-2021-42321

Modified .NET deserialization payload for CVE-2021-42321, based on ysoserial.net, that writes files and bypasses Windows Defender to target Microsoft…

them4hd1/pencrawler

Automated web crawler and directory brute-forcing tool for penetration testing, designed to discover hidden files, directories, and endpoints on…

vp777/windows-non-paged-pool-overflow-exploitation

Techniques based on named pipes for pool overflow exploitation targeting the most recent (and oldest) Windows versions demonstrated on CVE-2020-17087…

bitsadmin/wesng

Windows Exploit Suggester - Next Generation

ghostpack/pspkiaudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

joaoaugustom/adobe_coldfusion_rce_unauthenticated

Python exploit for CVE-2023-26360 targeting Adobe ColdFusion unauthenticated RCE via log poisoning and template execution, supporting Windows and…

adenkiewicz/cve-2009-1330

Simple exploit for Easy RM to MP3 Converter 2.7.3.700 on Windows 7 32b.

0vercl0k/wtf

Distributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.

nirvanaon/antive-behaviorwatch

Embedded GRU neural network for real-time human behavior verification via mouse movement analysis, detecting automated analysis systems, sandboxes,…

rt1252/cve-2021-34427

Proof-of-concept exploit for CVE-2021-34427 targeting Birt Viewer 4.8.0 on Windows. Demonstrates exploitation of a remote code execution…

d0rb/packetpirate

A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems.

beichendream/godpotato

DCOM-based privilege escalation tool for Windows Server 2012-2022 and Windows 8-11, elevating users with ImpersonatePrivilege to NT AUTHORITY\SYSTEM…