SHGenOb

SHGenOB: Shellcode Generator from PIC C Code Introduction SHGenOB is a Python-based tool designed to generate shellcode from Position Independent Code PIC written in C. It automates the process of compiling C code, extracting the .text section, and optionally encrypting the resulting shellcode...

SharpZipRunner

SharpZipRunner Executes position independent shellcode from an encrypted zip Get PIC code from your assembly either by using donut or metasploit or cobaltstrike RAW format. zip the .bin file and encrypt it with a password, this assembly decrypts the zip entry in memory and executes it using...

Remote-BOF-Runner

Remote BOF Runner A Havoc extension framework for remote execution of Beacon Object Files BOFs using a PIC loader made with Crystal Palace. Overview Remote BOF Runner enables secure execution of BOFs in arbitrary processes by leveraging the Crystal Palace PIC loader. This framework implements a...

Maverick

Maverick An Adaptix C2 agent built with Crystal Palace — a custom PIC Position Independent Code linker and PICO module system. Demonstrates how to build modular shellcode agents where each component transport, tasks, obfuscation is a separate PICO blob loaded at runtime. Note This agent does not...

Crystal-Loaders

Crystal Loaders Este repositorio contiene un par de cargadores PIC y un sleepmask COFF personalizado para usar con Cobalt Strike. Son implementaciones básicas en las que se debe integrar el tradecraft de evasión personalizado mediante Crystal Palace. Uso 1. Descargue la Release de Crystal Palace...

shellcode-x64

Shellcode for Microsoft Windows 11 x64 This script generate Windows 11 x64 Reverse TCP Shellcode with PIC technique. Usage for generate shellcode python ./shellreversetcp.py -i 192.168.10.10 -p 443 Defualt language is C type shellcode, also Python, Csharp and powershell: python ./shellreversetcp....

Analysis-for-stage1-shellcode-loader-from-hacking-

Analysis for stage1 shellcode loader from hacking team Flowchart of code Network IoC https://172\.20\.20\.164 Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDRJS...

Cisco Identity Services Engine (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. CVE-2026-76444 - A...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. CVE-2026-76446 - A...

CVE-2026-76451

A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...

CVE-2026-20287

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by improper privilege management vulnerabilities (grouped under CWE-269 ), discovered internally during a security hardening review. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L...

CVE-2026-20287 Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

EUVD-2026-81163

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20285 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-76448

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by an SQL/HQL injection vulnerability caused by insufficient validation of user-supplied input to affected APIs before it is used to build database queries. An authenticated remote attacker with v...

CVE-2026-76451

Cisco Identity Services Engine (ISE) and Cisco ISE-PIC contain a SQL/HQL injection vulnerability in the Certificate Management APIs, caused by insufficient validation of user-supplied input before it is used to build database queries. An authenticated, remote attacker with valid administrative cr...

EUVD-2026-81151

A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the...

CVE-2026-76450

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an SQL/HQL injection vulnerability caused by insufficient validation of user-supplied input to affected APIs before it is used to build database queries. An authenticated, remote attacker with valid ad...

CVE-2026-20237

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

CVE-2026-20130

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...