CVE-2004-2271-MiniShare-1.4.1-BOF

CVE-2004-2271 - MiniShare 1.4.1 - BOF References https://nvd.nist.gov/vuln/detail/CVE-2004-2271 Vulnerability MiniShare 1.4.1 has no bounds checking on HTTP GET requests it receives. By sending a long, malformed HTTP GET request, an attacker can perform a buffer overflow and execute arbitrary cod...

Flangvik

Flangvik C POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - Buffer Overflow Research Objective Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes. The objective of this project was to better understand: Application fuzzing Crash analysis EIP...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

This repository does not have a README...

cve-2018-9948-9958-exp

2018-9948-9958-exp "getshellcodefrommsf.py" is a python script to get shellcode from msfvenom, then copy the output to the exp.pdf replace the 'calc' shellcode block, and finally it works. Ooooops, it's a tcp reverse shellcode. a sample code is like this: python getshellcodefrommsf.py 192.168.1.7...

CVE-2017-9757

Exploit for syncbreeze Shellcode to obtain a shell from Syncbreeze v10.0.28...

Citadel

Introduction Citadel is a collection of various scripts for pentest-related tasks. List of scripts included vars.zsh msfresourcescripts dnsdump.py fileinfo.zsh fileserver.py opcodes.zsh stackpush.zsh sslconvert.zsh gitdownload.zsh cardmon.zsh powershellcmdstager.py sfparser.py xmltojson.py...

AVIator

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About ://name AV : AntiVirus Ator : Is a swordsman, alchemist, scientist, magician, scholar, and engineer, with the ability to sometimes produce objects out of thin air https://en.wikipedia.org/wiki/Ator About ://purpose AV|Ator is a backdoor...

ICALL-GADGET

ICALL GADGET ABUSE FOR COMMUNICATION General info: this is in the windows kernel and it will allow us to communicate in our driver without being detected to by anticheats So I was scrolling around in IDA and found this image After further inspection we can see that it calls a function called...

memory-relocalloc

RelocAlloc: Using .reloc section to replace the typical allocation calls Explaining the code: We first, locate the addresses of all the dlls mapped to our process. We then construct an array of structs and we fill it up with some data, thats Initialize function. Now, we have a full array, next st...

Black-Angel-Rootkit

Black Angel Rootkit Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality. Designed for Red Teams. Rootkit Features Rootkit can be loaded with kdmapper to bypass DSE, Black Angel Loader may not be working properly...

GhostStrike

GhostStrike ⚔️ GhostStrike is an advanced cybersecurity tool designed for Red Team operations, featuring sophisticated techniques to evade detection and perform process hollowing on Windows systems. ✨ Features Dynamic API Resolution: Utilizes a custom hash-based method to dynamically resolve...

packer-KitsuPE

KitsuPE In this repository, you'll find some sort of playground I use for my PE portable executable file modification stuff. The code should be compiled using LLVM for Windows because I replace/redefine some intrinsic functions i.e. memset for substituting usage of the regular Win32 CRT. shellcod...

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity...

venom-rs

Shellcode Reflective DLL Injection sRDI in Rust Codename: Venom Shellcode reflective DLL injection sRDI is a process injection technique that allows us to convert a given DLL into a position-independent code which can then be injected using our favourite shellcode injection and execution techniqu...

CVE-2026-31431-Linux-Copy-Fail

🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode With Ease 📌 Project Overview This software provides a tool to test the Linux CVE-2026-31431 vulnerability. It uses the Rust programming language to interact with system files. The program allows users to run custom shellcode on targeted...

Classic Remote Shellcode Injection

Build an injector EXE that decrypts shellcode and injects it into a remote process via VirtualAllocEx/WriteProcessMemory/CreateRemoteThread. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.compile.backdoorhelpers import buildencryptedzigbackdoor, optionvalue from...

Sandbox Evasion Loader

Apply sandbox heuristics RAM/CPU/disk, mouse movement, sleep timing and only execute decrypted shellcode when the environment looks benign. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.compile.backdoorhelpers import buildencryptedzigbackdoor, optionvalue from...

Thread Pool Injection Evasion

Decrypt shellcode and queue it as a TpAllocWait/TpSetWait thread-pool callback no CreateThread on the payload path. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.compile.backdoorhelpers import buildencryptedzigbackdoor, optionvalue from lib.compile.threadpoolinjection...

XOR Shellcode Runner Evasion

Windows x64 EXE pure Zig: XOR-encrypted embedded shellcode, RW→RX, CreateThread. Compiled with the same Zig pipeline as zigshellevasion. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.compile.backdoorhelpers import compilezigpe, generatepayloadbytes, optionvalue,...