CVE-2023-28324

CVE-2023-28324 POC para CVE-2023-28324 que afecta a Ivanti EPM. Análisis técnico Puede encontrar un análisis técnico de la causa raíz de la vulnerabilidad en nuestro blog: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Resumen Este POC explota una vulnerabilidad en...

MASAPT

MASAPT 🤖 ↔ 🤖 ↔ 🤖 ❗ Disclaimer This tool is developed for academic and research purposes as a part of the university course. The use of MASAPT for attacking targets without prior consent is illegal. Developers hold no responsibility for any damage made with this tool and condemn any nefarious usag...

EDR-ALPC-Block-POC

Prueba de Concepto de Bloqueo ALPC de EDR Bloqueo de agentes EDR de Windows mediante el registro de un objeto IPC propio en el espacio de nombres del Administrador de objetos CVE-2023-3280, CVE-2024-5909, CVE-2024-20671 y otros sin CVEs asignados Introducción Este repositorio contiene código de...

witchcraft

🎉 Your OPSEC companion. Run witchcraft help or witchcraft manual for the complete manual 🎉 What it does? WITCHCRAFT Are much more than a simple alias, it's a init system that can works with busybox, a shell and automation's and automation's engine for hacking, osint, forensics, etc. NAME witchcra...

gmailc2

gmailc2 A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so...

hget

hget This project is my personal project to learn golang to build something useful. Build Status : Install $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install Binary file will be built at ./bin/hget, you can copy to /usr/bin or /usr/local/bin and even ali...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner codeclimate maintainability Created by nil0x42 and contributors !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb35833ee8b1f57c068ae36288119...

log4shell-finder

log4shell-finder - El escáner de sistema de archivos más rápido para instancias log4j Puerto Python de https://github.com/mergebase/log4j-detector log4j-detector es copyright C Copyright 2021 Mergebase Software Inc. https://mergebase.com/ Licenciado bajo GPLv3. La motivación para portarlo a Pytho...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

Palsy-Virus

Palsy Virus Virus en Python que paralizará tu PC una vez que se abra ,se oculta a sí mismo y se agrega al inicio del registro ^^ Plataforma : -- Windows solo :P...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

fisy-fuzz

FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...

WeBaCoo

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / Web Backdoor Cookie Script-Kit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Written by: Anestis Bechtsoudis @ bechtsoudis.com Copyright C 2011-2012...

KRBUACBypass

Background This POC is inspired by James Forshaw @tiraniddo shared at BlackHat USA 2022 titled “ Taking Kerberos To The Next Level ” topic, he shared a Demo of abusing Kerberos tickets to achieve UAC bypass. By adding a KERB-AD-RESTRICTION-ENTRY to the service ticket, but filling in a fake...

Schwarze-Sonne-RAT

Schwarze-Sonne-RAT SS-RAT Schwarze-Sonne-Remote-Access-Trojan...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 Un PoC de omisión de autenticación en Fortinet FortiOS Descripción Use este PoC, puede omitir la autenticación y ver el registro del sistema USO sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 poc.py usage: poc.py -h --target TARGET --port PORT poc.py:...

RogueWinRM

RogueWinRM RogueWinRM is a local privilege escalation exploit that allows to escalate from a Service account with SeImpersonatePrivilege to Local System account if WinRM service is not running default on Win10 but NOT on Windows Server 2019. Briefly, it will listen for incoming connection on port...

CVE-2024-20767

CVE-2024-20767 CVE-2024-20767 - Lectura arbitraria del sistema de archivos mediante una vulnerabilidad de control de acceso inadecuado en Adobe ColdFusion Consulte la publicación del blog de ma4ter para obtener más información: Adobe ColdFusion任意文件读取漏洞CVE-2024-20767分析 Productos y versiones...

CVE-2025-10377

Prueba de Concepto CVE-2025-10377 Cross-Site Request Forgery CSRF en el Panel del Sistema del Plugin Función sdtogglelogs Tipo de vulnerabilidad: Cross-Site Request Forgery CSRF Función afectada: sdtogglelogs CVSS v3.1: 4.3 Media Vector: AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N Nota: La puntuación...