EDRChoker

EDRChoker EDRChoker uses Policy-based Quality of Service QoS to set hard bandwidth caps throttling on Endpoint Detection and Response EDR agents, causing them to always time out - effectively blocking them. The rules take effect immediately and persist after the target reboots Windows. EDRChoker...

veneficus-implant-public

Veneficus Mini - Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Public technical outline · pseudo-code only · not executable abraxaslabs.tech · @abraxasnull Veneficus Mini is Full kill-chain malware 0day:...

veneficus

@abraxasnull · [email protected] · abraxaslabs.tech · github.com/abraxas/veneficus Credit: @YoSoth0 Veneficus Mini v3.0 Windows 10/11 x64 implant kit: a PowerShell stager , a Rust PE , and a Cloudflare Worker that pages the operator on Telegram. The stager resources/loader.ps1 is meant to...

CVE-2025-8088-Winrar-Tool-Gui

🚨 CVE-2025-8088 WinRAR Exploit Tool ⚠️ FOR EDUCATIONAL AND RESEARCH PURPOSES ONLY ⚠️ 🌐 Language / Dil 🇺🇸 English 🇹🇷 Türkçe English 📋 Table of Contents Overview Features Requirements Installation Usage Technical Details Screenshots Disclaimer Contributing 🎯 Overview CVE-2025-8088 is a fictional...

ezsploit

ezsploit Alt text Automatización de script bash de Linux para metasploit Script de línea de comandos para automatizar funciones de metasploit Verifica el servicio de metasploit y lo inicia si no está presente Crea fácilmente payloads reversetcp de meterpreter para Windows, Linux, Android y Mac...

ios11-cookie-set-expire-issue

iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...

POC-of-CVE-2022-36271

POC-de-CVE-2022-36271 El nombre del producto afectado : Outbyte PC Repair Installation File La versión afectada : 1.7.112.7856 El ID de CVE para la entrada : CVE-2022-36271 Descripción: iertutil.dll falta, por lo que un atacante puede usar un dll malicioso con el mismo nombre y puede obtener...

CVE-2025-8088

Technical Deep Dive: CVE-2025-8088 - The Resilient Path Traversal Disclaimer: This content is for educational and research purposes only. Do not use this information for any malicious activities. Today, we're taking a deep dive into a fascinating path traversal vulnerability, tracked as...

linux-root-kit

About This Project This project was developed as part of the Digitale Forensik course at the Technische Hochschule Deggendorf. It demonstrates a full forensic investigation and attack simulation involving: A Python dependency confusion attack using a malicious PyPI package Privilege escalation vi...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

iOS-Bluetooth-Ethernet-Exploit

Zero-Cost Ethernet Gateway Exploit on iOS Bluetooth PAN → USB Port 62078 Author: Fares Dahoumane Twitter/X: https://x.com/faresdahoumane Date: June 2026 Status: Public Disclosure Results Only – Full technical details submitted to BlackHat Arsenal for review. ⚠️ Disclaimer This repository is for...

intel471-threat-hunting-cve-2023-46604

Intel 471 Threat Hunting Workshop – CVE-2023-46604 Investigation Overview This repository documents my first hands-on experience with Intel 471’s Intelligence-Driven Threat Hunting Workshop focused on CVE-2023-46604. Through this practical workshop, I investigated how attackers leveraged a critic...

CVE-2026-108742

CloudBeaver versions through 25.3.5 are vulnerable to a missing authorization flaw in the initConnection GraphQL mutation . This allows members with only view-only shared-project access to persist credentials without the required datasource-edit permission. An attacker can set the saveCredentials...

EUVD-2026-96908

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials without datasource-edit permission. Attackers can set saveCredentials and sharedCredentials flags with chosen...

shepard

SHEPARD BITS Esta es una herramienta de persistencia que utiliza el Servicio de Transferencia Inteligente en Segundo Plano de Windows BITS. Funcionalidad Descarga de archivos, Exfiltración de archivos, Descarga de archivos + Ejecución persistente Uso Ejecute shepard.exe como Administrador con los...

spybrowse

BrowseSpy Asegúrate de cambiar las variables ftp en todo el código; estas variables contienen el nombre de usuario, la contraseña y la dirección IP del servidor FTP que recibe los archivos. Este código hará lo siguiente: 1. Se copiará a sí mismo en el directorio %TMP% y se nombrará ursakta.exe 2...

Powershell-C2

Powershell-C2 Este ataque se deriva de mi Powershell Payload Excel Delivery, pero utiliza un método realmente interesante para el comando y control/persistencia en el equipo. Puedes encontrar un tutorial aquí:...

CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

CVE-2025-24813 - Apache Tomcat Partial PUT + Deserialization RCE 📋 Overview CVE-2025-24813 is a high‑severity vulnerability in Apache Tomcat that allows unauthenticated remote code execution when three conditions are met: 1. The default servlet has write access enabled readonly=false. 2. Partial...

Tomcat-CVE-2025-24813

Conditions of Use DefaultServlet write function is enabled: it needs to web.xml be configured inreadonly=false Partial PUT request support: Tomcat supports block upload by default Enable file session persistence: need to context.xml configure PersistentManager and FileStore There is a...

Malicious code in agent-vx (PyPI)

Source: kam193 815c9aad02259785c1e8b8569c0aead4598c1ea8f4802463a8db7f7240410296 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...