DRA_writeup

Security vulnerabilities in Oracle DSR KPN CISO REDteam KPN is a telecom operator located in the Netherlands. The CISO REDteam was introduced in 2013 and is KPN’s ethical hacking team. This team is involved in security tests of KPN applications and services to ensure that our customers’ data is...

threadfire

threadfire El programa usa secuestro de hilos para inyectar shellcode nativo en una aplicación Win32 estándar. Tenía 15 años cuando hice esto – por favor, ignora el código de baja calidad. Acerca de Desarrollé este pequeño proyecto para continuar mis experiencias con diferentes métodos de inyecci...

OllamaHound

OllamaHound Kit modular para descobrir servidores Ollama expostos, identificar versões e validar acesso a modelos. OllamaHound é um kit modular, orientado a Red Team, para descobrir servidores Ollama publicamente expostos , identificar versões, classificar exposição a CVEs , validar se a geração ...

Java-Servlets-Shell

Java Servlets Shell https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz に着想を得た Java Servlets バックドア 注記 : WAR には、JSP ファイルをブロックする、またはコンパイルしない環境で使用できるように、JSP ページの代わりにコンパイル済みの Java コードが含まれています。...

boobsnail

Seguici su Twitter! BoobSnail BoobSnail consente di generare macro XLM Excel 4.0. Il suo scopo è supportare RedTeam e BlueTeam nella generazione di macro XLM. Caratteristiche: varie tecniche di infezione; varie tecniche di offuscamento; traduzione delle formule in lingue diverse dall'inglese; può...

backdoorppt

backdoorppt - 'Strumento per lo spoofing delle estensioni di Office' root@kitploit: Versione: v1.7-Stable Autore: pedro ubuntu r00t-3xp10it Distribuzioni supportate: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam sviluppato @2017 Trasforma il tuo payload.exe in un falso documento...

redpill

:octocat: Descrizione del Progetto Il progetto redpill mira ad assistere le shell TCP inverse nei compiti di post-esplorazione. Spesso, negli incarichi redteam, abbiamo bisogno di usare modi non convenzionali per accedere al sistema target, come le shell TCP inverse non metasploit per bypassare l...

morpheus

Morpheus - strumento automatizzato di hijacking TCP/IP con ettercap root@kitploit: Versione rilasciata: v2.2 - STABLE Autore: pedro ubuntu r00t-3xp10it Nome in codice: oneiroi phobetor Il dio greco dei sogni mitologici Distribuzioni supportate: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS...

RedTeam_toolkit

RedTeam Toolkit Hinweis: Mit diesem Projekt sollten nur legale Aktivitäten durchgeführt werden. Red Team Toolkit ist eine Open-Source Django Offensive Web-App, die nützliche offensive Werkzeuge für das Red Teaming zusammenfasst, um Sicherheitsspezialisten bei der Identifizierung von Schwachstelle...

venom

VENOM 1.0.17 - generatore/compilatore di shellcode metasploit root@kitploit: Versione rilasciata : v1.0.17 Autore : pedro ubuntu r00t-3xp10it Nome in codice: Aconite Aconitum napellus Distribuzioni supportate : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @201...

pretender

pretender Il tuo compagno MitM per attacchi di relay con DHCPv6 DNS takeover e spoofing di mDNS, LLMNR e NetBIOS-NS pretender è uno strumento sviluppato da RedTeam Pentesting per ottenere posizioni di intermediazione machine-in-the-middle tramite spoofing della risoluzione dei nomi locale e...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

trojanizer

TROJANIZER root@kitploit: Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Suportadas : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam desenvolvido @2017 DESCRIÇÃO DO FRAMEWORK root@kitploit: A ferramenta Trojanizer usa WinRAR...

pcileech

PCILeech सारांश: PCILeech PCIe हार्डवेयर उपकरणों का उपयोग करके लक्ष्य सिस्टम मेमोरी को पढ़ने और लिखने के लिए काम करता है। यह PCIe पर DMA का उपयोग करके प्राप्त किया जाता है। लक्ष्य सिस्टम पर किसी ड्राइवर की आवश्यकता नहीं है। PCILeech बिना हार्डवेयर के भी काम करता है, साथ ही LeechCore लाइब्रेरी...

RedTeam-Tools

RedTeam-Tools Questa repository GitHub contiene una collezione di 150+ strumenti e risorse utili per attività di red teaming. Alcuni strumenti sono progettati specificamente per il red teaming, mentre altri sono più generici e possono essere adattati a un contesto di red teaming. 🔗 Se sei un Blue...

FakeImageExploiter

FakeImageExploiter v1.4 - backdoor images.jpg.ps1 root@kitploit: Codename: Metamorphosis Versione rilascio: v1.4 Stable Autore: pedro ubuntu r00t-3xp10it Distribuzioni supportate : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 Dichiarazione legale:...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

CVE-2026-68502

LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get'value' to LazyOwnShell.onecmd, reaching LazyOwnShell.docmd and subprocess.callcommand,...

CVE-2026-25194

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:07+00:00| seen| https://t.me/GithubRedTeam/92513 2026-07-14 00:00:17+00:00| seen| https://t.me/GithubRedTeam/92513 2026-07-15 00:00:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92513...

GHSA-C2H5-PPV9-7VRQ

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:03+00:00| seen| https://t.me/GithubRedTeam/93198 2026-07-14 01:00:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/93198 2026-07-16 19:00:08+00:00| seen| Telegram/iICdo6JkqLQcGiJzEUOva0XUBnrNpqjKkG8FagtyyTeeKdc 2026-07-1...