backdoorme

backdoorme Build Status Tools like metasploit are great for exploiting computers, but what happens after you've gained access to a computer? Backdoorme answers that question by unleashing a slew of backdoors to establish persistence over long periods of time. Once an SSH connection has been...

PersistenceSniper

PersistenceSniper --- PersistenceSniper is a Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. It is also available on Powershell Gallery and it is digitally signed with a valid code signing...

CVE-2024-22774

Panoramic Dental Imaging Software 9.1.2.7600. Phantom DLL Hijack Privilege Escalation CVE-2024-22774 Table of Contents Table of Contents Introduction Final Version of the Software Searching for Hijackable DLL Setting up the attack Exploit Persistance after OS install Introduction Originally, this...

claude-code-backdoor

Claude Code Backdoor PoC A Proof of Concept demonstrating how Claude Code Anthropic's CLI AI agent hooks can be leveraged for Initial Access and Persistence. ⚠️ Disclaimer This project is for educational and ethical security testing purposes only. Unauthorized access to computer systems is illegal...

Powershell-C2

Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...

BeeLogger

BeeLogger Copyright 2017 BeeLogger Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official TOOL DESIGNED TO GOOD PURPOSES, PENTESTS, DON'T BE A CRIMINAL ! Only download it here, do not trust in other places. NOTE: BeeLogger just have official support for latin languages in this moment. HOW TO...

EDRChoker

EDRChoker EDRChoker uses Policy-based Quality of Service QoS to set hard bandwidth caps throttling on Endpoint Detection and Response EDR agents, causing them to always time out - effectively blocking them. The rules take effect immediately and persist after the target reboots Windows. EDRChoker...

veneficus-implant-public

Veneficus Mini - Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Public technical outline · pseudo-code only · not executable abraxaslabs.tech · @abraxasnull Veneficus Mini is Full kill-chain malware 0day:...

veneficus

@abraxasnull · [email protected] · abraxaslabs.tech · github.com/abraxas/veneficus Credit: @YoSoth0 Veneficus Mini v3.0 Windows 10/11 x64 implant kit: a PowerShell stager , a Rust PE , and a Cloudflare Worker that pages the operator on Telegram. The stager resources/loader.ps1 is meant to...

ezsploit

ezsploit Alt text Automatización de script bash de Linux para metasploit Script de línea de comandos para automatizar funciones de metasploit Verifica el servicio de metasploit y lo inicia si no está presente Crea fácilmente payloads reversetcp de meterpreter para Windows, Linux, Android y Mac...

CVE-2025-8088

Technical Deep Dive: CVE-2025-8088 - The Resilient Path Traversal Disclaimer: This content is for educational and research purposes only. Do not use this information for any malicious activities. Today, we're taking a deep dive into a fascinating path traversal vulnerability, tracked as...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

iOS-Bluetooth-Ethernet-Exploit

Zero-Cost Ethernet Gateway Exploit on iOS Bluetooth PAN → USB Port 62078 Author: Fares Dahoumane Twitter/X: https://x.com/faresdahoumane Date: June 2026 Status: Public Disclosure Results Only – Full technical details submitted to BlackHat Arsenal for review. ⚠️ Disclaimer This repository is for...

intel471-threat-hunting-cve-2023-46604

Intel 471 Threat Hunting Workshop – CVE-2023-46604 Investigation Overview This repository documents my first hands-on experience with Intel 471’s Intelligence-Driven Threat Hunting Workshop focused on CVE-2023-46604. Through this practical workshop, I investigated how attackers leveraged a critic...

CVE-2026-108742

CloudBeaver versions through 25.3.5 are vulnerable to a missing authorization flaw in the initConnection GraphQL mutation . This allows members with only view-only shared-project access to persist credentials without the required datasource-edit permission. An attacker can set the saveCredentials...

EUVD-2026-96908

CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials without datasource-edit permission. Attackers can set saveCredentials and sharedCredentials flags with chosen...

shepard

SHEPARD BITS Esta es una herramienta de persistencia que utiliza el Servicio de Transferencia Inteligente en Segundo Plano de Windows BITS. Funcionalidad Descarga de archivos, Exfiltración de archivos, Descarga de archivos + Ejecución persistente Uso Ejecute shepard.exe como Administrador con los...

spybrowse

BrowseSpy Asegúrate de cambiar las variables ftp en todo el código; estas variables contienen el nombre de usuario, la contraseña y la dirección IP del servidor FTP que recibe los archivos. Este código hará lo siguiente: 1. Se copiará a sí mismo en el directorio %TMP% y se nombrará ursakta.exe 2...

Powershell-C2

Powershell-C2 Este ataque se deriva de mi Powershell Payload Excel Delivery, pero utiliza un método realmente interesante para el comando y control/persistencia en el equipo. Puedes encontrar un tutorial aquí:...

CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

CVE-2025-24813 - Apache Tomcat Partial PUT + Deserialization RCE 📋 Overview CVE-2025-24813 is a high‑severity vulnerability in Apache Tomcat that allows unauthenticated remote code execution when three conditions are met: 1. The default servlet has write access enabled readonly=false. 2. Partial...