GhostTask

Ghost Scheduled Task Inspired by WithSecure's research on Scheduled Task Tampering, they explained the feasibility of creating a scheduled task solely through registry key manipulation. Such an approach can bypass the generation of scheduled task creation event logs, such as 4698 and 106, providi...

ShadowClone

ShadowClone ShadowClone allows you to distribute your long running tasks dynamically across thousands of serverless functions and gives you the results within seconds where it would have taken hours to complete. You can make full use of the Free Tiers provided by cloud providers and supercharge...

exocomp

Exocomp Self-hosted multi-agent environment tailored to Golang. Features Attention, profit-seekers and visionaries! Are organics costing you time, wages, and - worst of all - benefits? Then upgrade your operation today with the all new Exocomp adaptive repair unit, the smartest investment this si...

CVE-2021-43657

CVE-2021-43657 This is a reference/POC for CVE-2021-43657 This vulnerability was found when i was playing with the open source software which is responsible for Employee Task Management System...

Neo

The Neo C2 Framework A modular server-client architecture post-exploitation framework built for collaborative agent management in red team operations and security testing. Enables flexibility by allowing operators to add their own extension modules Installation • Agents & Stagers • Profiles &...

The vulnerability of the Shtab project and task management service, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

pyGPOAbuse

pyGPOAbuse Filter Additions by D4RKMATT3R DISCLAIMER: This was only tested briefly in a local AD environment I take no responsibility for any unprecedented behavior or malfunctioning, it is provided as-is, for authorized testing only, entirely at your own risk. Now supports filtered targeting of...

natlas

Natlas Summary You've got a lot of maps and they are getting pretty unruly. What do you do? You put them in a book and call it an atlas. This is like that, except it's a website and it's a collection of nmaps. Natlas' objective is to make it easy to perform continuous scanning and review collecte...

modo

Modo The open-source AI IDE that plans before it codes. MIT License · Quick Start · What Modo Adds · Contributing I wanted a small feature in an AI coding tool. Couldn't find a way to suggest it. So I asked myself: how hard is it to actually build something like Kiro, Cursor, or Windsurf? Turns o...

server

Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

ScheduleRunner

ScheduleRunner - A C tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and...

ring3-kit

ring3-kit Hides Process From Task Manager Using NT Hooking NtQuerySystemInformation. A simple Ring-3 user mode rootkit. How Hook the API function NtQuerySystemInformation with our own function that hides a process from task manager Hooked function gets called instead The DLL is injected into...

RedPersist

RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...

CVE-2026-27495

CVE-2026-27495 — n8n JS Task Runner 샌드박스 탈출 호스트-영역 객체 누출을 통한 n8n JavaScript Task Runner 샌드박스 탈출. | ---|--- CVE| CVE-2026-27495 CVSS| 9.4 Critical CWE| CWE-94 — Code Injection 영향 받는 버전| n8n 1.123.22 / 2.0.0–2.9.2 / 2.10.0 수정된 버전| 1.123.22 / 2.9.3 / 2.10.1 공격 표면| Code node 인증 필요, Task Runners 활성화 빠...

CVE-2024-24386

VitalPBX - CVE-2024-24386 취약점 제목: 명령 삽입 작성자: Erick Duarte 버전: 3.2.5-2 이 취약점은 Task Manager 모듈을 Cron Profile과 함께 사용할 때 발생합니다. 이 취약점을 악용하려면 OS 내 특정 폴더에 스크립트를 배치해야 합니다. 해당 폴더는 "/var/lib/vitalpbx/scripts"입니다. 그래서 호기심에 Burp를 사용하여 서버로 전송되는 내용을 분석하기 시작했습니다. 이를 위해 1분마다 실행되는 Cron Profile을 생성했습니다. 다음으로 Task...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - 다중 요소 인증MFA 우회 익스플로잇 제목: Userlock - 다중 요소 인증MFA 우회 날짜: 01/11/2023 익스플로잇 작성자: Pinar Sadioglu 공급업체 홈페이지: https://www.isdecisions.com/products/userlock/help/ 버전: schtasks /create /tn "MFABypassOnLogon" /sc onlogon /tr "cmd.exe /c powershell.exe" 도메인 자격 증명으로...

CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40032: Simple Task Managing System - 'login' 및 'password' SQL 인젝션 인증 없음 익스플로잇 제목: Simple Task Managing System - 'login' 및 'password' SQL 인젝션 인증 없음 날짜: 2022-01-09 익스플로잇 작성자: Hamdi Sevben 공급업체 홈페이지:...

turbinia

Turbinia 요약 참고: Turbinia는 더 이상 새로운 기능을 개발하지 않으며 유지보수 모드에 있습니다. 사용자는OpenRelik을 확인하시기 바랍니다. Turbinia는 분산 포렌식 워크로드를 배포, 관리 및 실행하기 위한 오픈 소스 프레임워크입니다. 일반적인 포렌식 처리 도구예: Plaso, TSK, strings 등의 실행을 자동화하여 클라우드에서 증거를 처리하고, 대량의 증거 처리 규모를 조정하며, 가능한 경우 병렬 처리를 통해 응답 시간을 단축하는 데 목적이 있습니다. 작동 방식 Turbinia는 클라이언트, ...

CVE-2025-21420_POC

cleanmgr.exe 디핑 새로운 버전의 cleanmgr.exe에는 SetProcessMitigationPolicy 함수 호출이 포함되어 있습니다. MitigationPolicy가 16으로 설정되어 있으며, 이는 ProcessRedirectionTrustPolicy 에 해당합니다. Microsoft의 CWE-59: 파일 액세스 전 부적절한 링크 확인'Link Following' 설명과 함께 보면, cleanmgr.exe에 Redirection Guard가 활성화되어 있음을 추론할 수 있습니다. Simon Zuckerbraun...

SharpMove

SharpMove - .NET authenticated execution for remote hosts Building To compile open Visual Studio project and compile for release. Options WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath SharpMove.exe action=query...