Evtx_Log_Browser

Evtx Log xml Browser Browse through Windows evtx event logs & export to xml Latest version ishere Dependencies: .NET Framework 4.8 Powershell Version: 5.1...

dotnetfile

dotnetfile dotnetfile is a Common Language Runtime CLR header parser library for Windows .NET files built in Python. The CLR header is present in every Windows .NET assembly beside the Portable Executable PE header. It stores a plethora of metadata information for the managed part of the file...

CVE-2025-53770

CVE-2025-53770 – Microsoft SharePoint Server 2019 RCE no autenticado mediante deserialización Autor del exploit: Agampreet Singh Herramienta: RedRoot https://github.com/Agampreet-Singh/RedRoot Fecha: 7 de agosto de 2025 Probado en: SharePoint Server 2019 v16.0.10383.20020 en Windows Server 2019 I...

CVE-2019-0708-test

CVE-2019-0708-test CVE-2019-0708 C Vulnerability Verification Programming Language: C Programming Software: Visual Studio 2012 Programming Environment: .Net Framework 4.5 A software written in C to verify the CVE-2019-0708 vulnerability Calls 0708detector.exe released by 360's 360Vulcan Team...

Harden-Windows-Security

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods !.NET Badgehttp...

Untrue

Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...

CVE-2019-18935-exploit-study

CVE-2019-18935-exploit-study In-depth study of CVE-2019-18935 affecting Telerik UI for ASP.NET AJAX. Covers .NET deserialization vulnerability, RadAsyncUpload handler, gadget chains, mixed-mode assembly exploitation, and mitigation strategies...

GarbageMan

GarbageMan What is GarbageMan? GarbageMan is a set of tools designed for .NET heap analysis. These tools offer the following benefits for malware researchers: Ability to extract clear-text payload PE Images etc. from .NET heaps quickly. Easy analysis of encrypted network protocols, signs of data...

mal_unpack

malunpack Dynamic unpacker based on PE-sieve 📖 Read more . It deploys a packed malware, waits for it to unpack the payload, dumps the payload, and kills the original process. !CAUTION This unpacker deploys the original malware. Use it only on a VirtualMachine. ⚙ Usage Basic usage: root@kitploit:...

CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053292 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9clientrpc Syzbot with the help of KMSAN reported the following erro...

PT-2026-86577

Name of the Vulnerable Software and Affected Versions MojoX::Authentication versions prior to 0.006 Description An authentication bypass exists in the SAML implementation. The parse assertion function in MojoX::Authentication::Model::SAML2 initializes Net::SAML2::Binding::POST without a trust...

CVE-2019-18935

CVE-2019-18935 Exploit Remote Code Execution exploit for Telerik UI ASP.NET AJAX through deserialization vulnerability. How to Run Step 1: Clone the Project root@kitploit: git clone https://github.com/menashe12346/CVE-2019-18935.git cd CVE-2019-18935 Step 2: In CVE-2019-18935.py, modify line 15:...

CVE-2021-46703

CVE-2021-46703 Constructor simple de payload basado en el POC en: https://github.com/Antaris/RazorEngine/issues/585 Uso C root@kitploit: dotnet build --configuration Release .\bin\Release\net4.8\Poc.exe "System.IO.File.WriteAllText"rce.txt", "Hello World";" Python root@kitploit: ./poc.py...

CVE-2019-7214

Windows Reverse Shell Exploit PowerShell sobre TCP Este script de Python apunta a un servicio vulnerable que se ejecuta en una máquina Windows remota. Envía un payload .NET serializado que lanza una reverse shell basada en PowerShell de vuelta a la máquina del atacante. CVE-2019-7214 Ejecución...

joniles__mpxj_CVE-2020-35460_8-3-4

MPXJ Welcome to MPXJ! This library provides a set of facilities to allow project information to be manipulated in Java, .Net, Ruby and other languages. Full documentation including release notes can be found online at http://mpxj.org...

SharpWhispers

SharpWhispers C porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub. Read the blog post for the technical details: https://www.secforce.com/blog/sharpasm-sharpwhispers/ Requirements Visual Studio .NET Framework = 3.5 Python3 Usage root@kitploit: / /...

vba2clr

TLDR: Just experimenting with different ways to load CLR .NET assemblies on VBA locally and remotely by using AppDomain.ExecuteAssembly or any other handy method after getting arround AccessVBOM programmatic access to visual basic project is not trusted from VBA. vba2clr..vba: Sets AccessVBOM...

XorStringsNET

XorStringsNET A tool for simple and quick XOR based string encryption of .NET binaries XORStrings implements a simple XOR based cipher, I call RXOR. RXOR does not only encrypt the string but also reverses its character order. Each string is encrypted with a unique key. The arguments used by the...

Endurance-Wiper

Endurance-Wiper Beta - Open Source A small wiper malware written in C using the .NET framework. If you are from Twitter or any other source, you can clearly tell this is in active development. You are free to check the updates here...