deep-C

Deep-C Deep-C is an Android Deep Link Exploitation Framework that automatically decompiles APKs, identifies exposed and insecure deep link entry points, validates exploitability using static analysis and optional AI verification , and generates executable adb Proof-of-Concepts PoCs. Deep-C is...

lykan

lykan Lykan is a leak analysis program written in C that generates visual graphs of the analysed data. It receives as inputs raw password text dumps where the passwords are separated by '\n' and extracts statistical information about the dumps, including the top passwords, character popularity et...

SilkETW

SilkETW & SilkService SilkETW & SilkService are flexible C wrappers for ETW, they are meant to abstract away the complexities of ETW and give people a simple interface to perform research and introspection. While both projects have obvious defensive and offensive applications they should primaril...

chromebackdoor

Chrome browser backdoor VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go python chromebackdoor.py user: root pass:...

SindriKit

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

SharpPolarBear

SharpPolarBear This is a weaponized version for one of the Exploits published by SandboxEscaper from here https://github.com/SandboxEscaper/polarbearrepo. Most of the code comes from rasta-mouse CollectorService repository https://github.com/rasta-mouse/CollectorService. I just changed the...

Linux RAID10 Component Compromise

The vulnerability of the drivers/md/raid10.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-116076

Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supply a crafted Word 8 .doc file claiming up to 0xffff LSTF records in a tiny buffer, causing reads past the heap...

PT-2026-116077

Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attackers can supply a crafted .doc file with malicious FKP pages to read past the 512-byte stack buffer, crashing antiwor...

cve-2025-6907

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Author: Byte Reaper Target Service: CODEPROJECT Type: SQL Injection 🔎 Overview This is a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODEPROJECT service. It combines multiple advanced techniques: Automat...

DPAPISnoop

DPAPISnoop A C tool that extracts crackable DPAPI hashes from user MasterKeys and CREDHIST files. Targets both the MasterKey $DPAPImk$ and the full CREDHIST chain $credhist$, supporting local paths and remote SMB shares. What it extracts MasterKey hashes $DPAPImk$ MasterKey for each user can be...

profilehound

/ \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound is a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines. It uses the...

Dna

Dna Dna is a static binary analysis framework built on top of LLVM. Notably it's written almost entirely in C, including managed bindings for LLVM, Remill, and Souper. Functionality Dna implements an iterative control flow graph reconstruction inspired heavily by the SATURN paper. It iteratively...

WinboxExploit

WinboxExploit C implementation of BasuCert/WinboxPoC Winbox Critical Vulnerability CVE-2018-14847 Just reimplemented a solution from https://github.com/BasuCert/WinboxPoC...

DuplexSpyCS

DuplexSpy DuplexSpyCS CS stands for CSharp is a open source RAT base on C/S Continuously update: Branch-Version2.1.0 Documents The online documents are here: DuplexSpy Fileless Execution DLL and shellcode injector and loader Remote Plugin Proxy Introduction DuplexSpy is a open-source Windows RAT...

SharpDNSExfil

SharpDNSExfil SharpDNSExfil is an exfiltration tool written in C. The main objective is to exfiltrate any "on disk" files without having to worry about restricted outbound connection. Prerequisite Remote machine should be able to resolve DNS Why did I do this? I got blind RCE during my engagement...

CVE-2021-36934

CVE-2021-36934 C implementation of CVE-2021-36934 also called HiveNightmare/SeriousSAM with built-in parser...

Apache_Penetration_Tool

ApachePenetrationTool A vulnerability exploit tool developed using QT C++, for details of the vulnerability analysis, please refer to: https://www.hui-blog.cool/posts/de1f.html Tool interface At the vulnerability selection number, select the vulnerability that needs to be detected. Vulnerability...

libpo32

libpo32 A small C99 library for Teenage Engineering PO-32 acoustic data transfers and drum synthesis. libpo32 reimplements the PO-32 Tonic transfer stack and a compatible drum voice model. It is not a full PO-32 firmware or UI emulator; it covers the packet format, acoustic modem, frame decoder,...

schrodingers-toctou

Schrödinger's TOCTOU "...the definition of 'sane compiler' grows ever looser." The binary you run is not the program you wrote. The compiler optimizer rewrites your source in ways you never see — and some of those changes can silently and legally turn seemingly secure code into vulnerable binarie...