spawn

SPAWN - BOF de Cobalt Strike BOF de Cobalt Strike que crea un proceso sacrificial, lo inyecta con shellcode y ejecuta el payload. Construido para evadir hooks de EDR/UserLand al crear un proceso sacrificial con Arbitrary Code Guard ACG, BlockDll y suplantación de PPID. Debido a ACG, esto no es...

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Known issues it will not work outside kali , i will update it later on : Check out CVE-2021-42287/CVE-2021-42278 Weaponisation sAMAccountName spoofing...

LazyHook

Overview LazyHook is a stealthy API hooking framework that bypasses Host Intrusion Prevention Systems HIPS through call stack spoofing. By leveraging CPU-level hardware breakpoints and Vectored Exception Handling, it executes arbitrary code as if it originated from trusted, Microsoft-signed...

LOLSpoof

LOLSpoof LOLSpoof es un programa de shell interactivo que suplanta automáticamente los argumentos de línea de comandos del proceso generado. Simplemente llama a tu línea de comandos de apariencia incriminatoria LOLBin p. ej. powershell -w hidden -enc ZwBlAHQALQBwAHIAbwBjAGUA.... y LOLSpoof se...

Project-Onyx

Project Onyx Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems. It shifts away from traditional signature-based obfuscation towards behavioral camouflage and stri...

CVE-2025-12720

g-FFL Cockpit = 1.7.1 - Unauthenticated Arbitrary Product Deletion The g-FFL Cockpit plugin does not implement proper authorization checks on the queue and process REST API endpoints, allowing unauthenticated users to delete arbitrary WooCommerce products by spoofing HTTP headers to bypass IP-bas...

Shelter

Shelter Shelter es una técnica de ofuscación de suspensión completamente armada que permite cifrar por completo tu payload en memoria haciendo un uso extensivo de ROP. Este crate viene con las siguientes características: Cifrado AES-128. Capacidad de cifrar el PE completo. Eliminación del permiso...

FakeMBR

FakeMBR TDL4 style rootkit to spoof read/write requests to master boot record Needs to be compile with NTDDK. See: http://www.malwaretech.com/2015/01/using-kernel-rootkits-to-conceal.html...

CVE-2020-25265-25266

CVE-2020-25265 / CVE-2020-25266 CVE-2020-25265 CVE-2020-25266 This is a PoC exploit of libappimage and appimaged. Using a combination of the two CVEs, one cancreate a file that does not appear to be an appimage that is both implicitly picked up by appimaged and installed, overriding a system...

FiercePhish

FiercePhish FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more. The features will continue to be expanded and will include website spoofing, click tracking, and extensiv...

Egyscan

EgyScan V3.4 "Ultra": Tu Fortaleza Digital de Invencibilidad 🏰 ¡Saludos, Guardianes del Reino Digital! 🛡️ Prepárate para embarcarte en un viaje extraordinario con EgyScan V3.0 , el centinela definitivo que transforma tus sitios web en fortalezas inexpugnables contra las implacables ciberamenazas...

CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 Proof-of-Concept PoC exploit chain targeting the TP-Link Omada ER605 DDNS client daemon cmxddnsd when the device is configured to use the Comexe DDNS service. ⚠️ Legal / Ethics : This...

IG-Detective

IG-Detective 🕵️‍♂️📸 Creado por@shredzwho | 💖 Patrocina este proyecto IG-Detective es una herramienta OSINT Inteligencia de Fuentes Abiertas de alto rendimiento para Instagram, basada en Python. Ofrece un shell interactivo premium para realizar análisis profundos en cuentas de Instagram, extraer...

SAMLRaider

SAML Raider - SAML2 Burp Extension Description SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was originally created by Roland Bischofberger and Emanuel Duss...

CVE-2020-10135-BIAS

CVE-2020-10135-BIAS CVE 2020-10135 a.k.a BIAS Bluetooth Impersonation Attack Seems like after a while and jumping through some hoops was able to perform BIAS Bluetooth Impersonation Attack CVE 2020-10135. Impersonated Samsung S3 Neo+ connection to Linux host. Cool stuff. THANK YOU for Internalblu...

ExtensionSpoofer

ExtensionSpoofer ExtensionSpoofer is a Visual Basic .NET desktop app that demonstrates how file names and icons can be visually manipulated on Windows while the underlying executable file type remains unchanged. It uses the Unicode Right-to-Left Override character U+202E to reverse displayed...

RCLocals

RCLocals Inspirado en 'Autoruns' de Sysinternals, RCLocals analiza todas las posibilidades de inicio de Linux para encontrar puertas traseras, también realiza verificación de integridad de procesos, escanea procesos con inyección de DLL y mucho más Aspectos cubiertos: ·Listar claves GPG de...

SMTPTester

SMTPTester SMTPTester is a python3 tool to test SMTP server for 3 common vulnerabilities: Spoofing - The ability to send a mail on behalf of an internal user Relay - Using this SMTP server to send email to other address outside of the organization user enumeration - using the SMTP VRFY command to...

CVE-2019-17240

CVE-2019-17240 Exploit Versions prior to and including 3.9.2 of the Bludit CMS are vulnerable to a bypass of the anti-brute force mechanism that is in place to block users that have attempted to incorrectly login 10 times or more. The vulnerability was discovered by Rastating. Submitting a login...

CVE-2015-3224

CVE-2015-3224 Exploit - Rails Web Console RCE A JavaScript implementation Node.js of the exploit for CVE-2015-3224. This tool targets Ruby on Rails applications running vulnerable versions of the web-console gem, allowing unauthenticated Remote Code Execution RCE. About the Vulnerability...