ShellcodeCompiler

Shellcode Compiler Shellcode Compiler is a program that compiles C/C++ style code into a small, position-independent and NULL-free shellcode for Windows x86 and x64 and Linux x86 and x64. It is possible to call any Windows API function or Linux syscall in a user-friendly way. Shellcode Compiler...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains est un programme UNIX qui intercepte les fonctions libc liées au réseau dans les programmes LIÉS DYNAMIQUEMENT via une DLL préchargée dlsym, LDPRELOAD et redirige les connexions via des proxys SOCKS4a/5 ou HTTP. Il ne prend en charge que TCP pas UDP/ICMP...

SenselessViolence

SenselessViolence CVE-2022-31814 pfSense pfBlockerNG = 2.1.426 Exploitation Toolkit. What? This is an exploitation toolkit for the pfSense pfBlockerNG = 2.1.426 plugins remote command injection feature discovered by IHTeam. I wrote this to play around with some of the design principles found in t...

emp3r0r

emp3r0r A self-healing, memory-only C2 for Linux and Windows — agents that survive broken links, never touch disk, and script their way through the Win32 API. What is emp3r0r? emp3r0r is a post-exploitation framework and C2 built for Linux and Windows environments where stealth and resilience...

CVE-2017-7921-Research-Toolkit

CVE-2017-7921 Research Toolkit Security Statement: This tool is intended for authorized security research and vulnerability verification only. Table of Contents Legal and Ethical Statement Project Description Features Installation Usage Output Defense and Remediation Recommendations Technical...

SharpCovertTube

SharpCovertTube SharpCovertTube is a program created to control Windows systems remotely by uploading videos to Youtube. The program monitors a Youtube channel until a video is uploaded, decodes the QR code from the thumbnail of the uploaded video and executes a command. The QR codes in the video...

machofile

machofile machofile est un module permettant d'analyser les fichiers binaires Mach-O, avec un accent sur l'analyse de logiciels malveillants et la rétro-ingénierie. Inspiré par le module pefile d'Ero Carrera, ce module vise à offrir des capacités similaires mais pour les binaires Mach-O. Le...

CVE-2025-27591-Below

CVE-2025-27591-Below 📌 Description This is a proof-of-concept PoC exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below system monitor tool. The issue arises from unsafe handling of log files /var/log/below/errorroot.log when executed with elevated privileges. By...

ShellGhost

ShellGhost A memory-based evasion technique which makes shellcode invisible from process start to end. Motivation I wanted to share this shellcode self-injection POC to showcase some AV/EDR evasion concepts that may turn useful for Red Teaming. Just a few weeks ago I came up with a custom in-memo...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local privilege escalation tmp-root for the au/KDDI Xiaomi "aristotle" XIG04 on Android 12 , via CVE-2026-43499. It is a device-owner rooting primitive: it roots your own phone e.g. to re-enable ADB when developer options are unreachable. This is an...

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...

CVE-2021-3156

CVE-2021-3156 Note: These instructions are my own and notes from a stream that I did. If anything is wrong, then let me know. Trust official sources first! Hello everyone, A couple of days back, a serious heap-based buffer overflow has been discovered in sudo that is exploitable by any local user...

awesome-threat-intelligence

awesome-threat-intelligence Une liste organisée de ressources remarquables sur la Threat Intelligence Une définition concise de la Threat Intelligence : connaissance fondée sur des preuves, incluant le contexte, les mécanismes, les indicateurs, les implications et des conseils actionnables,...

FsquirtCPLPoC

Fsquirt.exe Windows binary attempts to load a Control Panel applet CPL called bthprops.cpl from its current working directory. When bthprops.cpl is present alongside fsquirt.exe, the binary loads it and executes a MessageBox from DLLMain. This PoC code generates a malicious bthprops.cpl file that...

Fritter

Fritter The evasive cousin of Donut. Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator. It generates position-independent shellcode for in-memory execution of VBScript, JScript, EXE, DLL, and .NET assemblies, with a focus on evasion and signature resistance. Th...

TestCitrixException

Test Citrix Exception test CVE-2025-6759 mitigation Citrix documentation about CVE-2025-6759 contains alternative mitigation by disabling Citrix exception handler from registry. However, that documentation does not answer the question: Will this change need VDA service or server restart or not? s...

flipper-template

Flipper Zero Zig Template A modern, production-ready template for developing Flipper Zero applications using the Zig programming language. This project provides a streamlined build system that integrates Zig with the Flipper Zero SDK, enabling developers to write type-safe, memory-safe applicatio...

CVE-2024-24590-ClearML-RCE-Exploit

CVE-2024-24590 — RCE عبر مرفق Pickle في ClearML نظرة عامة الحقل| التفاصيل ---|--- CVE| CVE-2024-24590 البرنامج| ClearML الإصدارات المتأثرة| 0.17.0 – 1.14.2 الثغرة| إلغاء تسلسل غير آمن عبر pickle لمرفقات المهام المصادقة| يتطلب صلاحية كتابة لمشروع ClearML التأثير| تنفيذ أكواد عن بُعد على أي جهاز...

grapefruit

Grapefruit : suite open-source de test de sécurité mobile Boîte à outils d'instrumentation d'applications mobiles à l'exécution propulsée par Frida. Inspectez, hookez et modifiez des applications mobiles via une interface web. Prend désormais en charge iOS et Android ! Démarrage rapide Nécessite ...

unimap

Unimap Scan only once by IP address and reduce scan times with Nmap for large amounts of data. Unimap is an abbreviation of "Unique Nmap Scan ". The tool can run in Linux, OSX, Windows or Android Termux without problems. Why? If you have plans to run a Nmap to a whole organization you need to...