ret-sync

ret-sync ret-sync 代表逆向工程工具同步（Reverse-Engineering Tools SYNChronization）。它是一组插件，用于将调试会话（WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg）与反汇编器（IDA/Ghidra/Binary Ninja）同步。其核心理念很简单：从静态分析和动态分析两个世界中各取所长。 调试器和动态分析为我们提供： 局部视图，具有实时动态上下文（寄存器、内存等） 内置的特殊功能/API（例如：WinDbg 的 !peb、!drvobj、!address 等） 反汇编器和静态分析为我们提供：...

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user. Trigger Command Execution EXP 1. Start RMI listener on VPS port 9999...

pwncat

pwncat pwncat is a post-exploitation platform for Linux targets. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. pwncat used to only support Linux, b...

pwncat

pwncat pwncat es una plataforma de post-explotación para objetivos Linux. Comenzó como un envoltorio alrededor de shells básicos bind y reverse y ha crecido desde entonces. Agiliza las operaciones comunes del equipo rojo mientras prepara código desde tu máquina atacante, no desde el objetivo...

CVE-2016-10033

PoC de explotación de CVE2016-10033 Este repositorio contiene los archivos necesarios para explotar CVE2016-10033 en una versión vulnerable de WordPress. Con estas instrucciones podrás obtener un shell interactivo inverso no Pseudo-TTY en el contenedor que ejecuta WordPress como el usuario que...

IIITA-IoT-Security-Research

IIIT Allahabad – IoT Security Research Internship Overview This repository showcases the work carried out during my Research Internship at the Indian Institute of Information Technology, Allahabad IIIT Allahabad under the Cryptography and Network Security CNS Lab. During this internship, I worked...

2018-QWB-CTF

2018-QWB-CTF 2018 Qiangwangbei CTF Challenge Collection │ ├── 01Misc-4题 │ ├── 题目名称：ai-nimals │ │ └── 题目名称：ai-nimals.mhtml │ ├── 题目名称：welcome │ │ └── 题目名称：welcome.mhtml │ ├── 题目名称：签到 │ │ └── 题目名称：签到.mhtml │ └── 题目名称：问卷调查 │ └── 题目名称：问卷调查.mhtml ├── 02Crypto-5题 │ ├──...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell Este script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo con precaución en entornos controlados y solo con fines educativos o de pruebas de seguridad. Publicación del...

cracked

Cracked Download and train your retro-engineering skills 🖳 What is Cracked? Cracked is a TUI for downloading quickly crackmes.one challenges while staying in your terminal. How to use Cracked? Installation cargo install cracked Usage $ cracked --help Usage: cracked OPTIONS Options: -n, --name...

CVE-2020-0796

Usage Make sure Python and ncat are installed. Run calctargetoffsets.bat on the target computer, and adjust the offsets at the top of the SMBleedingGhost.py file according to the script output also see the note below. Run ncat with the following command line arguments: ncat -lvp Where is the port...

sh1mazu

Shimazu 4.0 - code name met@rpet@r This an auto-reverse backdoor shell program, for exploiting of vulnerability OS...

serval

Un backdoor estilo Netcat para pentesting y desafíos de pentest Serval es un binario ligero y fácil de usar para generar shells reversos y vinculados bind shells para pentests o ejercicios de pentesting. Serval es multiplataforma y se puede compilar tanto para Windows de 32 y 64 bits como para...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

hoaxshell

hoaxshell ⚡ 本项目的最新版本是 HoaxShell 独立监听器，它带有更新的有效载荷模板。你也可以直接从 https://revshells.com 使用（确保选择 hoaxshell 作为监听器）。 ⚠️ 截至 2022-10-18，hoaxshell 已被 AMSI 检测到（恶意软件百科）。你需要混淆生成的有效载荷才能使用。查看本视频了解如何手动混淆并绕过 MS Defender： Hoaxshell 示例 - youtube.com/watch?v=iElVfagdCD4 常见 PowerShell 反弹 shell 模板示例 -...

Andromeda

Andromeda hace que el trabajo inicial de ingeniería inversa de aplicaciones Android sea un poco más rápido y sencillo. Comparado con otras alternativas, está escrito en C/C++ y tiene una ventaja de rendimiento notable. DEMOSTRACIÓN La herramienta está en su etapa temprana de desarrollo Compilació...

CVE-LiteLLM

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/ Summary...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

CVE-2024-37084-Poc

CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc about CVE-2024-37084 How to use : py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h, --help show...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheckvalidate endpoint with reverse shell payload delivery. Here’s a GitHub-style writeup for your project, including a clean and concise summary, a usage guide, and context on how it fits...