Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script...

byob

Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...

CVE-2023-36874

CVE-2023-36874 데모 목적으로만 사용하세요. 이 익스플로잇은 취약한 Windows 클라이언트/서버에서 작동합니다. 코드를 컴파일하고 c:\test\system32 디렉터리를 만드세요. 해당 디렉터리에 wermgr.exe를 배치하고 컴파일된 PoC를 실행하세요. https://github.com/Wh04m1001/CVE-2023-36874/assets/44291883/417d1384-4f3f-42c0-9e07-80d4347ed9c7 Windows 10 19045.2006에서 테스트함...

CVE-2020-27955-LFS

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등 발견자: Dawid Golunski https://legalhackers.com https://exploitbox.io Windows에서 테스트됨: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code...

clients

Bitwarden 클라이언트 애플리케이션 이 저장소는 모바일 애플리케이션iOS | Android을 제외한 모든 Bitwarden 클라이언트 애플리케이션을 포함합니다. 빌드 지침, 권장 도구, 코드 스타일 팁 및 시작에 도움이 되는 다양한 유용한 정보는 Contributing Documentation의 Clients 섹션을 참조하세요. 관련 프로젝트: bitwarden/server: 핵심 인프라 백엔드API, 데이터베이스, Docker 등. bitwarden/ios: Bitwarden iOS 비밀번호 관리자 및...

ThunderDNS

ThunderDNS This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support. Run Setting up NS records on our domain: Please wait for clearing DNS-cache. Simple server run: python3 ./server.py --domain oversec.ru Simple server run Dockerfile: docker run -e DOMAIN='' Simpl...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2025-55580

CVE-2025-55580 - SolidInvoice 클라이언트 저장형 교차 사이트 스크립팅 XSS 요약 SolidInvoice는 클라이언트 모듈에서 저장형 교차 사이트 스크립팅XSS 취약점에 취약합니다. 인증된 공격자가 애플리케이션에 임의의 JavaScript를 주입할 수 있으며, 이는 사용자의 브라우저에서 실행됩니다. 영향을 받는 버전 취약 버전: 2.3.7 수정 버전: 2.3.8 영향 악의적인 사용자가 애플리케이션에 임의의 JavaScript를 저장할 수 있으며, 이는 클라이언트 페이지를 보는 다른 인증된 사용자의...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...

Johnny-You-Are-Fired

Johnny-You-Are-Fired USENIX 논문의 아티팩트 | 전체 논문 여기 초록 OpenPGP와 S/MIME는 이메일을 암호화하고 디지털 서명하기 위한 두 가지 주요 표준이다. 디지털 서명은 메시지의 진위성과 무결성을 보장하기 위한 것이다. 이 연구에서 우리는 OpenPGP 및 S/MIME 이메일 서명 검증의 다양한 구현에 대한 실질적인 위조 공격을 다섯 가지 공격 클래스로 보여준다: 1 우리는 S/MIME 컨테이너 형식의 엣지 케이스를 분석한다. 2 우리는 가장 널리 사용되는 OpenPGP 구현인 GnuPG API...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

CVE-2025-67263

CVE-2025-67263 - Stored cross-site scripting XSS in Abacre Retail Point of Sale 14.0.0.396 Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting XSS vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name...

git-lfs-RCE-exploit-CVE-2020-27955

Git-lfs 원격 코드 실행RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등 발견자: Dawid Golunski https://legalhackers.com https://exploitbox.io Windows에서 테스트됨: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code,...

EUVD-2026-80254

Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that never paid. MPP.Plug.verifycredential in lib/mpp/plug.ex sets payment-receipt and cache-control: private on the connection before the wrapped application...

CVE-2021-40303

CVE-2021-40303 perfex crm 1.10은 /clients/profile을 통해 저장형 크로스 사이트 스크립팅XSS에 취약합니다. poc: root@kitploit: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...

CVE-2021-20323

CVE-2021-20323 説明 Keycloak 18.0.0 未満かつ 10.0.0 以降には、clients-registrations エンドポイントに反映型 XSS が存在します。このバグは、エンドポイントでサポートされていないパラメータ名をキーとする JSON 構造を POST で送信することでトリガーされます。レスポンスは、エラーメッセージ内に JSON キーを反映し、ヘッダーが Content-Type: text/html に設定されます。ブラウザで実行されると、JSON キー内の HTML コードが解釈され、JavaScript...