CVE-2019-7214

CVE-2019-7214 Remote Code Execution in .NET deserialization for the SmarterMail system. Collection Please find a collection of proof of concepts for the exploit in this repository. Some may work as intended without modification and some may require modification...

capa

Website | Download | Web Interface capa detects capabilities in executable files. You run it against a PE, ELF, .NET module, shellcode file, or a sandbox report and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

DotNetHookerToolkit

InjectorCli + ManagedHookHostProj This repository contains two projects that are designed to be used together: InjectorCli: A .NET Framework 4.8 console injector built on frida-clr Frida.dll ManagedHookHostProj: A .NET Framework 4.8 helper DLL with native exports via 3F .NET DllExport used to...

vxlang-page

VxLang Contents Docs What is VxLang? Supported File Formats Preview Virtualization Preview Dual-Mode Preview Obfuscation Preview Code-Flattening Preview Tutorial Usage & Guide-Code Precautions How to get the full version Donate and Subscription Patreon Link Event 2026 June Event Extension-Codes a...

link

link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction...

InlineExecute-Assembly

InlineExecute-Assembly InlineExecute-Assembly is a proof of concept Beacon Object File BOF that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module. InlineExecute-Assembly will execute any...

TaskManager-Button-Disabler

TaskManager-Button-Disabler Simple way to disable/rename buttons from a task manager. Installation root@kitploit: git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build Features Rename kill proccess button...

Privilege_Escalation

PrivilegeEscalation An windows UAC Bypass made simple 😋 Features Auto bypass for Windows 7/8/10 Manual bypass Failsafe delete all registry key made from Privilege Escalation Build root@kitploit: git clone https://github.com/Mrakovic-ORG/PrivilegeEscalation cd PrivilegeEscalation\PrivilegeEscalati...

net-Shield

net-Shield An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets Requirements Linux System with golang, iptables/ipsets Nginx Quickstart Run the bash script install.sh to install all the required dependencies. bash install.sh You will be prompted...

CVE-2019-18935-memShell

CVE-2019-18935-memShell source CVE-2019-18935-Memshell Compile root@kitploit: 1.Build https://github.com/A-D-Team/SharpMemshell/blob/main/VirtualPath/memshell.cs 2.Convert dll to byte array 3.Replace rawData in memShell.cpp 4.csc /target:module empty.cs 5.cl /c memShell.cpp 6.link /DLL /LTCG...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse is a .NET application written in C that can be used to take advantage of a user's edit rights on a Group Policy Object GPO in order to compromise the objects that are controlled by that GPO. More details can be found at the following blog post:...

LoGiC.NET

Introduction LoGiC.NET is a free and open-source .NET obfuscator using dnlib. It is currently under a rewrite. Dependencies dnlib v3.6.0...

Brovan

Brovan "Emulate like a bro" - for your emulation services. Brovan is a powerful user-mode binary emulator for inspecting and running x8664 programs in a controlled emulated environment. It supports PE, ELF, memory dumps, and even raw files with no recognized file format. It is a tool used to...

SILENTTRINITY

SILENTTRINITY SILENTTRINITY is modern, asynchronous, multiplayer & multiserver C2/post-exploitation framework powered by Python 3 and .NETs DLR. It's the culmination of an extensive amount of research into using embedded third-party .NET scripting languages to dynamically call .NET API's, a...

NashaVM

NashaVM - Native Sharp Virtual Machine Nasha is a Virtual Machine for .NET files and its runtime was made in C++/CLI Installation root@kitploit: git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild Dependencies dnlib .NET Framework Visual C++...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

Watson

Watson Watson is a .NET tool designed to enumerate missing KBs and suggest exploits for Privilege Escalation vulnerabilities. Supported Versions Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 & 2019 Usage root@kitploit: C:\ Watson.exe / / /\ \ \ | | \ / / / | /...

Sharperner

Sharperner Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning. Features PE binary Process Hollowing PPID Spoofing Random generated AES...