ThunderDNS

ThunderDNS 该工具可以通过DNS协议转发TCP流量。支持非编译客户端 + socks5。 运行 在我们的域名上设置NS记录： 请等待DNS缓存清除。 简易服务器运行： python3 ./server.py --domain oversec.ru 简易服务器运行（Dockerfile）： docker run -e DOMAIN='' 简易客户端运行（Bash）： bash ./bashclient.sh -d oversec.ru -n 简易客户端运行（PowerShell）： PS: ./psclient.ps1 -domain oversec.ru -clientname...

CVE-2023-36874

CVE-2023-36874 仅供演示目的。该漏洞利用程序可在易受攻击的Windows客户端/服务器上运行。 编译代码并创建 c:\test\system32 目录。将你的 wermgr.exe 放置在该目录中，然后运行编译好的PoC。 https://github.com/Wh04m1001/CVE-2023-36874/assets/44291883/417d1384-4f3f-42c0-9e07-80d4347ed9c7 在 Windows 10 19045.2006 上测试...

Anvil

面向 Windows 胖客户端的运行时优先权限提升与攻击面评估工具。 Anvil 是一款面向 Windows 胖客户端应用程序的运行时优先权限提升与攻击面评估工具。它并非盲目扫描文件系统，而是将 Procmon 捕获与 Windows AccessCheck 相结合，仅报告运行时实际观察到 并且 经确认可由标准用户写入的路径，从而消除了通用枚举工具中普遍存在的误报噪音。 目录 主要功能 工作原理 模块 环境要求 Sysinternals 工具 安装 分发 使用方法 示例 输出 严重等级模型 过滤器 免责声明 主要功能 大多数胖客户端评估工具仅覆盖一两种攻击类别。Anvil...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

clients

Aplicaciones cliente de Bitwarden Este repositorio alberga todas las aplicaciones cliente de Bitwarden excepto las aplicaciones móviles iOS | android. Consulta la sección de Clientes de la Documentación de contribución para obtener instrucciones de compilación, herramientas recomendadas, consejos...

CVE-2025-55580

CVE-2025-55580 - SolidInvoice 客户端存储型跨站脚本（XSS）漏洞 概述 SolidInvoice 在客户端模块中存在一个存储型跨站脚本（XSS）漏洞。经过身份验证的攻击者可以向应用程序注入任意 JavaScript，并随后在用户浏览器中执行。 受影响版本 受影响版本： 2.3.7 已修复版本： 2.3.8 影响 攻击者可以利用该漏洞在应用程序中存储任意 JavaScript，并在其他经过身份验证的用户查看 客户端 页面时执行。如果应用程序部署在多用户环境中——例如有多个管理员——则可能导致： 会话劫持 凭证或令牌窃取 钓鱼或社会工程攻击...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

CVE-2020-27955-LFS

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerables: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

NachoVPN

NachoVPN 🌮🔒 NachoVPN es una Prueba de Concepto que demuestra la explotación de clientes SSL-VPN, utilizando un servidor VPN malicioso. Utiliza una arquitectura basada en plugins para que la comunidad pueda contribuir con soporte para productos SSL-VPN adicionales. Actualmente admite varios...

CVE-2026-93999

A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs during the token refresh process when the server restores requested audiences from stored client IDs. Keycloak fails to verify if the target audience client i...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

Johnny-You-Are-Fired

Johnny-You-Are-Fired Artefactos para la publicación USENIX | Artículo completo aquí Resumen OpenPGP y S/MIME son los dos estándares principales para cifrar y firmar digitalmente correos electrónicos. Se supone que las firmas digitales garantizan la autenticidad e integridad de los mensajes. En es...

CVE-2025-67263

CVE-2025-67263 - Abacre零售POS系统14.0.0.396中的存储型跨站脚本（XSS）漏洞 Abacre零售POS系统14.0.0.396的客户模块存在存储型跨站脚本（XSS）漏洞。该应用程序未能正确清理用户在姓（Name）和名（Surname）字段中提供的输入。攻击者可以将恶意HTML或脚本内容插入这些字段，这些内容会持久化存储在数据库中。 "客户"选项卡下的"姓"和"名"字段存在存储型跨站脚本（XSS）漏洞。 通过添加一个简单的有效载荷，例如alert"xss 1"，将用户详情保存到数据库，然后点击‘报表’按钮，预览网页将触发XSS。...

git-lfs-RCE-exploit-CVE-2020-27955

Git-lfs 远程代码执行（RCE）漏洞 CVE-2020-27955（.bat / powershell 版本） 受影响软件：git、GitHub CLI gh、GitHub Desktop、Visual Studio Code、SourceTree、SmartGit、GitKraken 等 由 Dawid Golunski 发现 https://legalhackers.com https://exploitbox.io 在 Windows 上测试于： git、GitHub CLI gh、GitHub Desktop、Visual Studio...

EUVD-2026-80254

Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that never paid. MPP.Plug.verifycredential in lib/mpp/plug.ex sets payment-receipt and cache-control: private on the connection before the wrapped application...