538 matches found
postEX
PostEX - Post-Exploitation Recon Agent For authorized security testing only. Unauthorized use is illegal. PostEX is a Python-based post-exploitation reconnaissance agent for Windows. It collects system information, privilege status, installed patches, defense mechanisms, network configuration,...
CVE-2023-42442
Compartiendo el proceso de post-explotación de la vulnerabilidad de acceso no autorizado a JumpServer CVE-2023-42442 para Red Team Uso: go run CVE-2023-42442.go --url http://192.168.123.120 Ver artículo en WeChat: https://mp.weixin.qq.com/s/NCSnTsOMxslmf5S6d9896A...
redis-post-exploitation
redis-post-exploitation Solo con fines educativos Referencia https://2018.zeronights.ru/wp-content/uploads/materials/15-redis-post-exploitation.pdf https://paper.seebug.org/975/ Servidor Rogue https://github.com/knqyf263/redis-rogue-server Compilar root@kitploit: $ docker-compose build Ejecutar...
Log4jCenter
Log4jCenter Explotando CVE-2021-44228 en vCenter para ejecución remota de código y más. Artículo de blog detallando la explotación en el enlace de abajo: Cómo explotar vulnerabilidades Log4j en VMWare vCenter ¿Por qué? Las pruebas de concepto para esta vulnerabilidad están dispersas y deben...
React2Shell
Docker 实验室与检测扫描器及 PoC 验证：React2Shell CVE-2025-55182 免责声明： 本仓库及其 PoC 工件严格用于在隔离实验室环境中的教育、研究和防御性安全演示目的。未经授权对系统进行测试是严格禁止的。 1. 项目管理与授权边界 项目目的 本仓库提供了一个可复现的双容器 Docker 环境，旨在分析、利用并验证针对 React Server Components RSC Flight Protocol 反序列化漏洞（通常称为 React2Shell / CVE-2025-55182 ）的缓解措施。该实验室演示了在未打补丁的 Next.js...
pentest-metasploitable2-lab
Análise de Exploração e Resposta a Incidente — Laboratório Met...
emp3r0r v4.15.0
emp3r0r A self-healing, memory-only C2 for Linux and Windows — agents that survive broken links, never touch disk, and script their way through the Win32 API. What is emp3r0r? emp3r0r is a post-exploitation framework and C2 built for Linux and Windows environments where stealth and resilience...
Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol CDP inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions. The technique assumes th...
ctf-writeups
🏴 CTF Writeups & PoC Collection Documented solutions from Hac...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...
HTB-Writeups
Hack The Box Writeups This repository contains my Hack The Bo...
RollerCoaster
RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...
Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...
ExploitMind
ExploitMind v1.0.0 Full APT Kill-Chain Exploitation Framew...
OSCPToolkit
OSCP Toolkit Setup This is a bash script oscp-toolkit-setup...
windows7-eternalblue-lab
MS17-010 EternalBlue Exploitation Lab Hands-on penetration t...
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security MOIS has been wielding a previously undocumented modular command-and-control C2 framework dubbed Cavern aka Cav3rn targeting Israeli organizations. The activity, which has primarily singled out IT providers and...
mythox-opencode-cyber
⬡ MYTHOX CYBER OPS — OpenCode Agent Suite 6 agents متخصصو...