XeytanWxCpp-RAT

WARNING THIS PROJECT IS STILL IN THE EARLY PHASES OF DEVELOPMENT. AT THIS MOMENT IN TIME, THE APPLICATION LOOKS HORRIBLE, THERE IS AN ODD BUG FIRST TODO POINT, SEE BELOW THAT HAS TO BE FIXED ASAP. Introduction RAT application written in C++ using wxWidgets framework. Features Get client's system...

SolarWinds-CVE-2021-35250

SolarWinds-CVE-2021-35250 Serv-U v.15.3.0.X CVE-2021-35250-Directory-Traversal Hello everyone This is my first POC, don't judge strictly. Disclaimer The author of this repository is not responsible for any damage caused by the use or misuse of these PoC exploits. These PoCs are intended for...

psr

Pointer Sequence Reverser Designed to help a reverse engineer easily see how a Windows C++ application is accessing a particular data member or object. Given the memory address of a data member or object, this tool will set a memory breakpoint at that address and then produce traces of the...

Sharpmad

Sharpmad C version of Powermad This is not yet complete and has not been fully tested. It's also missing the following: Invoke-DNSUpdate Get-KerberosAESKey Temp Readme ADIDNS Module Sharpmad.exe ADIDNS -Action new -Node test Action| Description ---|--- AddACE| Add ACE to node. Disable| Tombstone ...

Woeful

Woeful A high performance Wisp server that has packet analysis. Features Wisp V1 Support Pcap network capture Blacklisting & Whitelisting ports and domains Is it fast? It's faster then WispServerCpp. The other benchmarks are more nuanced. Dependencies Big thanks to all of these projects:...

SusanRTTI

SusanRTTI Another RTTI Parsing IDA plugin Features All ida-python Class based design, error logging RTTI parsing algorithm scanning for vtables first instead of bruteforcing the entire rdata/data sections Graphing of class hierarchy using transitive reduction for clarity Export functionality to...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...

KnockOutlook

KnockOutlook "The best feeling is to win by knockout." - Nonito Donaire Overview KnockOutlook is a C project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. Command Line Usage / /// / // \ / // / / / / , / / / / /// / / / / / / /...

deobf-Arxan-Deob-C

Arxan-Deob-C Simple C program to quickly deobfuscate windows executables protected with Arxan. It's a little messy at the moment... Be warned : I will be cleaning it up...

Mhyprot2DrvControl

Mhyprot2DrvControl A lib that allows using mhyprot2 driver for enum process modules, r/w process memory and kill process. Usage Build and run, see Driver\MhyProt2.cs for available function and usage. Demo...

FuzzingBrain-Bench

FuzzingBrain Bench A benchmark for LLM-driven vulnerability reproduction on 77 real zero-day bugs across 43 open-source projects C / C++ / Java. Each challenge gives the agent only the fuzz harness the target and the project source at the vulnerable revision — no patch, no fix commit, no target...

hydrafw

HydraFW official firmware for HydraBus v1 HydraFW is a native C and asm open source firmware for HydraBus v1 board. You can Buy HydraBus v1 Online: http://hydrabus.com/buy-online Getting Started with HydraBus v1: https://github.com/hydrabus/hydrafw/wiki/Getting-Started-with-HydraBus HydraFW Wiki:...

Copy-Fail-Exploit-CVE-2026-31431

Copy-Fail-Exploit-CVE-2026-31431 unning the Python Exploit 1. Execute directly python3 copyfailexp.py Compiling the C Version 1. Compile gcc copyfailexp.c -o copyfail 2. Make executable chmod +x copyfail 3. Run exploit ./copyfail su...

cve-2021-4034

cve-2021-4034 Easy to use shell implementation of CVE-2021-4034 that was released yesterday. The original C code was sourced from https://github.com/arthepsy/CVE-2021-4034...

CVE-2026-92707

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

CVE-2025-46817-PoC

CVE-2025-46817 Redis Integer Overflow Exploit A lightweight C implementation of the CVE-2025-46817 exploit for Redis integer overflow vulnerability. 🚀 Features Lightweight : Single C file, no external dependencies beyond hiredis Fast : Native compilation for maximum performance Colorful Output :...

CVE-2026-92707

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...

CVE-2026-92707

The MessagePack-CSharp library is vulnerable to an improperly controlled sequential memory allocation (CWE-1325) when deserializing attacker-controlled data as System.Object via the PrimitiveObjectFormatter . The root cause is that the formatter allocates an object[] based on declared array lengt...

CVE-2026-92707 MessagePack: Nested arrays can blow past buffer length limits

MessagePack for C is a MessagePack serializer for C. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object from each declared array length before the...