SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

CVE-2023-36874

CVE-2023-36874 For demonstration purposes only. Exploit works on vulnerable Windows clients/servers. Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC...

ThunderDNS

ThunderDNS This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support. Run Setting up NS records on our domain: Please wait for clearing DNS-cache. Simple server run: python3 ./server.py --domain oversec.ru Simple server run Dockerfile: docker run -e DOMAIN='' Simpl...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

CVE-2020-27955-LFS

Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...

NachoVPN

NachoVPN 🌮🔒 NachoVPN is a Proof of Concept that demonstrates exploitation of SSL-VPN clients, using a rogue VPN server. It uses a plugin-based architecture so that support for additional SSL-VPN products can be contributed by the community. It currently supports various popular corporate VPN...

CVE-2026-51667

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the getWiFiIpMacTable function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain Wi-Fi client MAC-to-IP mappings , enabling passive reconnaissance of connec...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

clients

Bitwarden Client Applications This repository houses all Bitwarden client applications except the mobile applications iOS | android. Please refer to the Clients section of the Contributing Documentation for build instructions, recommended tooling, code style tips, and lots of other great...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

git-lfs-RCE-exploit-CVE-2020-27955

Exploit di Remote Code Execution RCE su Git-lfs CVE-2020-27955 versione .bat / powershell Vulnerabile: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken ecc. Scoperto da Dawid Golunski https://legalhackers.com https://exploitbox.io Testato su Windows su: git,...

CVE-2021-40303

CVE-2021-40303 perfex crm 1.10 è vulnerabile a Cross Site Scripting XSS memorizzato tramite /clients/profile. poc: root@kitploit: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

Johnny-You-Are-Fired

Johnny-You-Are-Fired Artefatti per la pubblicazione USENIX | Articolo completo qui Sommario OpenPGP e S/MIME sono i due standard principali per cifrare e firmare digitalmente le email. Le firme digitali dovrebbero garantire autenticità e integrità dei messaggi. In questo lavoro mostriamo attacchi...

CVE-2021-20323

CVE-2021-20323 Descrizione Keycloak prima della versione 18.0.0 e dopo la 10.0.0 contiene una XSS riflessa sull'endpoint clients-registrations. Il bug viene attivato fornendo, tramite POST, una struttura JSON con una chiave come nome del parametro che non è supportata dall'endpoint. La risposta...

Anvil

Avaliação de escalada de privilégios e superfície de ataque baseada em tempo de execução para thick clients Windows. Anvil é uma ferramenta de avaliação de escalada de privilégios e superfície de ataque baseada em tempo de execução para aplicações thick client Windows. Em vez de escanear o sistem...

CVE-2025-67263

CVE-2025-67263 - Cross-site scripting XSS memorizzato in Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 è affetto da una vulnerabilità di cross-site scripting XSS memorizzato nel modulo Clienti. L'applicazione non sanifica correttamente l'input fornito dall'utente...

CVE-2025-55580

CVE-2025-55580 - SolidInvoice Stored Cross-Site Scripting XSS in Clients Zusammenfassung SolidInvoice ist anfällig für ein Stored Cross-Site Scripting XSS-Problem im Client-Modul. Ein authentifizierter Angreifer kann beliebiges JavaScript in die Anwendung einschleusen, das dann in den Browsern de...