SharpShooter

/ // / / // / / / \ / / / / \ / / / / / / / / / / / / // / / / // // / / / / // / // / // / / /// //,// / ./// /////// // 설명 SharpShooter는 임의의 CSharp 소스 코드를 검색 및 실행하기 위한 페이로드 생성 프레임워크입니다. SharpShooter는 HTA, JS, VBS, WSF 등 다양한 형식의 페이로드를 생성할 수 있습니다. James Forshaw의 DotNetToJavaScript 도구를...

dropengine

by @s0lst1c3 Current release: v0.1.0-alpha Supports Python 3.7+. 개요 방어 회피Defense Evasion 기술은 일반적으로 수명이 짧으며, 특히 초기 접근 단계에서 사용되는 기술의 경우 더욱 그렇습니다. 이러한 이유로 초기 접근 페이로드는 종종 각 작업engagement마다 준비되며, 페이로드를 전부 수동으로 만들 경우 많은 시간이 소요될 수 있습니다. DropEngine은 셸코드 러너를 생성하기 위한 가단성 프레임워크를 제공하여 이 문제를 해결합니다. 이를 통해 운영자는...

The-Axer

The axer는 msfvenom으로 페이로드를 수동으로 생성하는 과정을 대체하여 더 쉽고 훨씬 빠르게 만들어 줍니다. 소유자에게 문의하기 THE AXER는 플랫폼, 포맷, 인코더를 선택하고 다른 파일과 바인딩 및 기타 많은 기능들을 제공합니다...

libenom

libenom Libenom이란 무엇인가 ?? Libenom은 MSFvenom으로 페이로드를 더 쉽고 빠르게 생성하고 생성된 모든 데이터를 정리하여 얻을 수 있도록 만들어진 도구입니다. :exclamation: 요구 사항 침투 테스트용 리눅스 배포판 또는 Ubuntu, Debian, Mint 권장: Kali Linux 2.0 sana 또는 2016.1 rolling, Parrot OS, Blackarch, Dracos, Lionsec :book: 시작하기 git clone...

Freeze.rs

이 저장소는 보관되었습니다 최신 버전의 Freeze.rs를 보거나 이슈를 제출하려면 https://github.com/Tylous/Freeze.rs를 참조하십시오. Freeze.rs 추가 정보 이 프레임워크에서 사용된 기술에 대해 더 알고 싶다면 SourceZero 블로그와 원본 도구를 확인해 주세요. 설명 Freeze.rs는 EDR 보안 제어를 우회하여 쉘코드를 은밀하게 실행하는 페이로드 생성 도구입니다. Freeze.rs는 여러 기술을 활용하여 Userland EDR 후크를 제거할 뿐만 아니라 다른 엔드포인트 모니터링 제어...

Exploit for CVE-2025-7441

CVE-2025-7441 StoryChief - 1.0.42 - Unauthenticated Arbitrary...

EUVD-2022-48309

Malicious code in bioql PyPI...

hackingtool-v5.1

All in One Hacking tool For Hackers🥇 !https://img.shields...

hackingtool

This is an all-in-one hacking tool for hackers, written in Python. The tool is designed to be run on Linux, Kali Linux, or Parrot OS. It provides a menu-driven interface for various hacking tasks, including information gathering, wireless attacks, SQL injection, phishing, web attacks,...

LFI-zip-exploit

LFI Zip Exploit Tool A Python tool to exploit LFI Local File...

Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution RCE Date: 25-06-2025 Exploit Author: Huseyin Mardini @housma Original Researcher: Luka Sikic Original Exploit Author: hash3liZer Vendor Homepage: https://wordpress.org/plugins/social-warfare/ Softwa...

Picklescan failed to detect to some unsafe global function in Numpy library

Summary An unsafe deserialization vulnerability in Python’s pickle module allows an attacker to bypass static analysis tools like Picklescan and execute arbitrary code during deserialization. This can be exploited by import some built-in function in Numpy library that indrectly call some dangerou...

CVE-2022-45437 Stored cross-site scripting vulnerability in the reporting dashboard module

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

vulhub

This repository is an offensive tool for vulnerability research and exploitation, specifically targeting various web applications and services. It contains a collection of exploits and tools for identifying and exploiting vulnerabilities in software and systems. The repository includes a variety ...

n+otes 1.6.2 - Denial of Service Exploit

Exploit Title: n+otes 1.6.2 - Denial of Service PoC Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/n-otes/id596895960 Version: 1.6.2 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of characters is being used when creating a note:...

MoveKit - Cobalt Strike Kit For Lateral Movement

Movekit is an extension of built in Cobalt Strike lateral movement by leveraging the executeassembly function with the SharpMove and SharpRDP .NET assemblies. The aggressor script handles payload creation by reading the template files for a specific execution type. IMPORTANT: To use the script a...

Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service (PoC)

Exploit Title: Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service PoC Exploit Author : Enes Özeser Exploit Date: 2021-02-28 Vendor Homepage : https://www.nsauditor.com/ Link Software : https://www.nsauditor.com/downloads/nhsisetup.exe Version: 1.6.4.0 Tested on: Windows 10...

ScareCrow - Payload Creation Framework Designed Around EDR Bypass

If you want to learn more about the techniques utlized in this framework please take a look at Part 1 and Part 2 Description ScareCrow is a payload creation framework for generating loaders for the use of side loading not injection into a legitimate Windows process bypassing Application...

TaskCanvas 1.4.0 - Registration Denial Of Service

TaskCanvas 1.4.0 - Registration Denial Of Service Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.ht...

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service

Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service Vendor Homepage:https://www.alloksoft.com/ Software Link: https://www.alloksoft.com/wmv.htm Exploit Author: Nithoshitha S Tested Version: v4.6.1217 Tested on: Windows 7 x64 Windows XP SP3 1.- Run python code :poc.py 2.-...