shells

Shellz A script for generating common revshells fast and easy. Especially nice when in need of PowerShell and Python revshells, which can be a PITA getting correctly formatted. PowerShell revshells Shows [email protected], above the prompt and working-directory Has a partial and full...

serval

A Netcat style backdoor for pentesting and pentest challenges Serval is a lightweight, easy-to-use, binary for spawning reverse and bind shells for pentests or pentesting exercises. Serval is cross platform and can be compiled for both Windows 32 & 64-bit and Linux 32 and 64-bit. Note: Due to the...

HackTools

Bienvenue sur HackTools ! — — — —...

Kautilya

Kautilya Kautilya는 침투 테스트 중 컴퓨터에 침입하는 데 도움이 될 수 있는 휴먼 인터페이스 장치용 다양한 페이로드를 제공하는 툴킷입니다. By nikhilmitt 페이로드 목록 Windows 수집 정보 수집 해시덤프 및 유출 키로깅 및 유출 스니퍼 WLAN 키 덤프 대상 자격 증명 획득 LSA Secrets 덤프 평문 비밀번호 덤프 SAM 복사 프로세스 메모리 덤프 Windows Vault 자격 증명 덤프 실행 다운로드 및 실행 핫스팟 연결 및 코드 실행 Powershell을 사용한 코드 실행 DNS TXT 쿼...

Brosec

Panoramica tl;dr Brosec è un'utilità di riferimento basata sul terminale progettata per aiutare noi infosec bros e broettes con payload e comandi utili anche se a volte complessi spesso usati durante il lavoro come professionisti della sicurezza informatica. Un esempio dei casi d'uso più popolari...

flashsploit

Exploitation Framework for ATtiny85 HID Attacks Twitter - Telegram - Blog Available in Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible .ino Scripts based on User Input and then...

POC_CVE-2025-32433

⚠️ Ethischer Haftungsausschluss Dieses Repository enthält Code, der eine echte CVE CVE-2025-32433 demonstriert. Verwenden Sie es nur in Umgebungen, in denen Sie eine ausdrückliche Genehmigung haben. Testen Sie diesen Exploit niemals gegen Systeme, die Sie nicht besitzen oder verwalten. Unbefugte...

RedGhost

RedGhost Linux Post-Exploitation-Framework, das darauf ausgelegt ist, Red Teams bei Persistenz, Reconnaissance, Privilege Escalation und spurlosem Handeln zu unterstützen. Payloads Funktion zum Generieren verschiedener codierter Reverse Shells in netcat, bash, python, php, ruby, perl SudoInject...

shellerator

Shellerator Shellerator ist ein einfaches CLI/TUI-Tool, das Pentestern hilft, schnell Reverse-, Bind- und Web-Shells in mehreren Programmiersprachen wie Bash, Powershell, Netcat, PHP, ASPX usw. zu generieren. Ein weiteres ähnliches Projekt zur Generierung von Einzeiler-Download-Befehlen basiert a...

JustTryHarder

JustTryHarder JustTryHarder è un cheat sheet che ti aiuterà durante il corso PWK e l'esame OSCP. Ispirato da PayloadAllTheThings Sentiti libero di inviare una Pull Request e lasciare una stella per condividere l'amore se questo ti è stato utile. 💖 Amichevole per Hacktoberfest! Sì, siamo aperti a...

pwncat

pwncat pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. pwncat used to only support Linux, b...

Cybersec

Offensive CyberSec Cheat Sheet Un prontuario HTML altamente dinamico e a file singolo progettato per Red Teamers, Penetration Tester e giocatori di CTF. Stanco di digitare gli stessi payload di Reverse Shell e di dover sostituire costantemente il tuo IP locale e la porta? Questo strumento elimina...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

Harmonic

Harmonic Suite L'inizio di un insieme di strumenti Linux per gestire e interfacciarsi con reverse shell il codice è ancora in uno stato rapido e sporco, con poca gestione delle eccezioni. Con una forte ispirazione alla filosofia UNIX, l'idea di base è avere un demone per gestire endpoint arbitrar...

Exploit for OS Command Injection in Devcode Openstamanager

CVE-2025-69212 OpenSTAManager --check Vulnerabili...

MAL-2026-6235 Malicious code in yianzzkf6687 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59a0aee58573b3030b9d541980fa9d7df8ea55d4e6cc5b3bb349452b908d0e9 On npm install, the postinstall hook scripts/postinstall.js detach-spawns scripts/shell.js with detached: true, stdio: 'ignore', windowsHide: true an...

MAL-2026-6217 Malicious code in aikaf788812 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91950cef6a5f877a4a9bca074501e4c910dc50008d4c8c2623ddc21f08e31f2 Package masquerades as a string-utility library but ships a postinstall backdoor. On npm install, scripts/postinstall.js spawns scripts/shell.js as a...

CVE-2018-25320

ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leveraging the EXECUTE function. Attackers can use bitsadmin to download malicious PowerShell scripts and execute them with system privileges to...

EUVD-2018-21841

ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leveraging the EXECUTE function. Attackers can use bitsadmin to download malicious PowerShell scripts and execute them with system privileges to...

CVE-2018-25320 ACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution

ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leveraging the EXECUTE function. Attackers can use bitsadmin to download malicious PowerShell scripts and execute them with system privileges to...