Atomic-Red-Team-C2

DESCRIPTION ARTC2 is a modern execution framework that helps security teams scale attack scenario execution from single and multi-breach point targets. It intends to produce actionable attack intel that improves the effectiveness of security products and incident response. OS-SUPPORT Windows OS...

CVE-2022-22718

A Privilege Escalation Vulnerability In Windows Print Spooler On Feb 9, 2022: The US Cyber in Infrastructure Security Agency CISA added the Windows Print Spooler vulnerability to their list of actively exploited vulnerabilities. The vulnerability was identified as CVE-2022–22718 with the Common...

CVE-2015-0057

CVE-2015-0057 Explotación en sistemas de 32 y 64 bits Autor: Aaron Adams Traducción: 55-AA Nota del traductor: Algunas partes de este artículo se han traducido libremente; consulte el original si tiene dudas. Terminología: Primitiva de operación: Similar a una función, es un conjunto de operacion...

mailenable-cve-2022-36934

MailEnable CVE-2022-36934 Exploit Module Metasploit module for MailEnable's authentication bypass vulnerability CVE-2022-36934, leading to remote code execution. 📌 Features Exploits MailEnable's improper input sanitization in SMTP/POP3 Supports both x86 and x64 Windows targets No user interaction...

CVE-2024-24576-PoC---Nim

Exploring Command Injection Vulnerabilities in Windows with Nim https://foxoman.hashnode.dev/exploring-command-injection-vulnerabilities-in-windows-with-nim?showSharer=true Here's a summarized table based on the testing results from the Nim code experiments with different payloads:...

CVE-2019-0708

CVE-2019-0708 BlueKeep pre-auth RCE POC on Windows7 This repository demonstrates the remote code execution bug in Windows Remote Desktop Services RDS. Here is a POC code and technical report about BlueKeep vulnerability, which we developed before. NOTE: Our goal is helping analysts to get better...

QLOG

Update July, 2022 We started QLOG as an experiment to learn more about Windows ETW. QLOG provides enriched Logging for process creation events on Windows. We have stopped development of QLOG because in the meantime free tools were published which use ETW for telemetry and do a way better job than...

CVE-2022-34718-PoC

CVE-2022-34718 IPv6 Remote Code Execution exploit sample This repository contains an exploit of CVE-2022-34718, a Remote Code Execution RCE vulnerability in IPv6 on Windows systems. How to Since the vulnerability requires specially crafted IPv6 packets, it depends on the Scapy module and therefor...

CVE-2023-38831

CVE-2023-38831 CVE-2023-38831 is an RCE in WinRAR 6.23 Reference by https://github.com/z3r0sw0rd/CVE-2023-38831-PoC Read up by Google's TAG at: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ Download the latest vulnerable version: 6.22 for...

spybrowse

BrowseSpy Asegúrate de cambiar las variables ftp en todo el código; estas variables contienen el nombre de usuario, la contraseña y la dirección IP del servidor FTP que recibe los archivos. Este código hará lo siguiente: 1. Se copiará a sí mismo en el directorio %TMP% y se nombrará ursakta.exe 2...

SneakyEXE

SneakyEXE root@kitploit: /$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$$$$$$$ /$$ $$ | $$ | $$/| $$ / $$| $$/ | $$ / /$$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$| $$ | $$/ $$/| $$ | $$$$$$ | $$ $$ /$$ $$ | $$| $$ /$$/| $$ | $$| $$$$$ \ $$$$/ | $$$$$ \ $$| $$ \ $$| $$$$$$$$ /$$$$$$$| $$$$$$/ | $$ | $$| $$/ $$ $$ ...

CVE-2017-0108

El componente de gráficos de Windows en Microsoft Office 2007 SP3; 2010 SP2; y Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 y R2 SP1; y Windows 7 SP1 permite a atacantes remotos ejecutar código...

CVE-2026-54121

CVE-2026-54121 Certighost This is a proof-of-concept tool to demonstrace CVE-2026-54121 a.k.a Certighost. Read here https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 for the detailed analysis. Install dependencies The proof of concept is a self-contained Python script. It requires...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

CVE-2021-1675-LPE-EXP

CVE-2021-1675-LPE-EXP Exploit LPE simple de CVE-2021-1675 Uso root@kitploit: CVE-2021-1675-LPE.exe C:\test\MyPigDLL.dll MyPigDLL.dll,es un DLL de prueba que creará C:\test.txt si tiene éxito. Aviso 1. Añadir EnumPrinterDriversW para obtener pDriverPath, así que no necesitamos cambiar la "ruta del...

AMSIext

AMSIext AMSIext is a Firefox and Chrome plugin that allows you to send any data stream from the browser to AMSI. AMSI is the way to communicate RAM memory with Windows Defender or any other endpoint security system. This means that while browsing the web, AMSIext will alert you to malicious...

CVE20131491-JIT

========================= Title ========================================= CVE-2013-1491 PoC using JIT-Spray by Yuki Chen 古河 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 Weibo: http://weibo.com/u/1874932054 ========================= About this PoC...

go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

raven

Raven CobaltStrike External C2 for Websockets Additional info: https://www.cobaltstrike.com/help-externalc2 Server Build Ubuntu Copy the server folder to your VPS. Run ./setup.sh as root or with sudo Client build Windows Copy the client folder to a Windows development host. Install the Windows 10...

CVE-2020-11107

CVE-2020-11107 This is a writeup for CVE-2020-11107 I've found. An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary...