neurax

Un framework que ayuda en la creación de software de autopropagación Resumen Con la ayuda de Neurax, los binarios Golang pueden propagarse en LAN/WAN sin usar servidores externos. Diversas opciones de configuración y stagers de comandos permiten una propagación rápida en diversos entornos...

Lucky-Spark

LUCKY-SPARK ⟪ LUCKY-SPARK ⟫ è uno stager progettato per payload shellcode serviti tramite http/https come sliver o su github raw. Utilizza moderni metodi di offuscamento ed evasione come la decrittazione just-in-time a finestra scorrevole del payload e il patching delle istruzioni della CPU. Di...

cve-2019-11707

SpiderMonkey - CVE-2019-11707 Ошибка: https://bugs.chromium.org/p/project-zero/issues/detail?id=1820 Скриншоты Файлы exploit.js — непосредственно эксплойт, к нему добавлены saelo's util.js и Int64.js. stager.js — используется для создания констант, к нему добавлены saelo's util.js и Int64.js...

java-stager

java-stager Ein PoC Java-Stager, der eine Java-Datei herunterladen, kompilieren und im Speicher ausführen kann. Dies dient nur zu Forschungszwecken, verwenden Sie es nicht an Orten, an denen Sie nicht autorisiert sind. Was ist das? Dies basiert auf der Arbeit von James Williams aus seinem Vortrag...

pybeacon

PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...

WSC2

WSC2 ULTIMA/VERSIONE CORRENTE: 0.1 Autore: Arno0x0x - @Arno0x0x WSC2 è una prova di concetto PoC dell'utilizzo di WebSocket e di un processo browser come canale di comunicazione C2 tra un agente, in esecuzione sul sistema target, e un controllore che funge da server C2 vero e proprio. Lo strument...

Sandman

Sandman Sandman è una backdoor progettata per funzionare su reti hardened durante attività di red team. Sandman agisce come stager e sfrutta NTP un protocollo per sincronizzare ora e data per ottenere ed eseguire uno shellcode arbitrario da un server predefinito. Poiché NTP è un protocollo spesso...

CVE-2022-42475

CVE-2022-42475 Hintergrund Dies ist der Exploit für den Blogbeitrag hier: https://bishopfox.com/blog/exploit-cve-2022-42475 Redigierte Version Diese Version des Exploits wird ohne Ihre Bereitstellung der erforderlichen Speicheradressen für ROP-Gadgets usw. nicht funktionieren. Die Arbeit zur...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

NewPowerDNS

NewPowerDNS NewPowerDNS ist eine aktualisierte Version von @domchell's PowerDNS. Die wichtigste hinzugefügte Funktion ist die Unterstützung für die Übertragung von Dateien über DNS A Records. Unten finden Sie eine vollständige Liste der vorgenommenen Änderungen: Unterstützung für die Übertragung...

NorthStarC2

NorthStarC2 هو إطار عمل مفتوح المصدر للقيادة والتحكم تم تطويره لأغراض اختبار الاختراق والفريق الأحمر بواسطة Engin Demirbilek. يتكون إطار عمل NorthStar C2 من تطبيقين: تطبيق ويب بواجهة رسومية على جانب الخادم لإدارة الجلسات، و stager على جانب العميل للتواصل مع خادم C2. التثبيت السريع git clone...

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that's been spreading via websites infected with ClickFix lures since late April 2026. "The malware is full-featured, lightweight, and modular," Elastic Security Labs researcher Cyril François said in a...

Linux dup2 Command Shell, Bind TCP Stager

dup2 socket in s1, then execve. Listen for a connection Module Options frozenstringliteral: true This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 264 include...

Linux dup2 Command Shell, Bind TCP Stager

dup2 socket in s1, then execve. Listen for a connection Module Options frozenstringliteral: true This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 256 include...

Linux dup2 Command Shell, Reverse TCP Stager

dup2 socket in s1, then execve. Connect back to the attacker Module Options frozenstringliteral: true This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 224 include...

Linux dup2 Command Shell, Reverse TCP Stager

dup2 socket in s1, then execve. Connect back to the attacker Module Options...

FTP Fetch, Windows Command Shell, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Fetch and execute an x86 payload from an FTP server. Listen for a connection Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

FTP Fetch, Windows shellcode stage, Bind TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Listen for a connection with UUID Support Windows x86 Module Options...

FTP Fetch, Reverse TCP Stager with UUID Support

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker with UUID Support Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...