EUVD-2026-94226

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

CVE-2026-58068

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

CVE-2022-30136

CVE-2022-30136 Windows Network File System Remote exploit PoC author: Ricardo Narvaja For demonstration purposes only. Complete exploit works on vulnerable Windows Server systems. Checkout the writeup Analysis of CVE-2022-30136 “Windows Network File System Vulnerability“. Usage Analysis of...

rat-shell

Stories in Ready Windows Remote Access Trojan RAT using .NET Sockets Client-server binaries and source-code for controlling a remote machine behind a NAT with a command-line shell in Windows. Although the core provides support for communication with multiple RATs, the command-line interface used...

CVE-2019-0708

CVE-2019-0708 PoC Shellcode only tested on x86 versions of Windows thus far. Be responsible and only use this with good intentions...

laZzzy

laZzzy laZzzy is a shellcode loader that demonstrates different execution techniques commonly employed by malware. laZzzy was developed using different open-source header-only libraries. Features Direct syscalls and native Nt functions not all functions but most Import Address Table IAT evasion...

ConTroll_Remote_Access_Trojan

DISCLAIMER ConTroll is for education/research purposes only. The author takes NO responsibility and/or liability for how you choose to use any of the tools/source code/any files provided. The author and anyone affiliated with will not be liable for any losses and/or damages in connection with the...

PIRATE

PIRATE Python Remote Acces Tool Usage 1- run payloader.py to generate client script 2- run pirate.py to manage server and receive connection Features Open remote shell Take screenshot Take webcam picture Run keylogger Windows persistence Send and receive files Open windows messagebox Usage Exampl...

-EXPLOIT-CVE-2023-36025

EXPLOIT CVE-2023-36025 - Description Windows SmartScreen Security Feature Bypass Vulnerability Usage NOTE handler waiting for tcp request for target P.S configure CVE-2023-36025.vbs file to change the ip and port to machine ip and port that is being used for the TCP handler configure reverse TCP...

DetectionLabELK

DetectionLabELK DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It has been designed with defenders in mind. Its primary purpose is to all...

ghost

ghost ghost is a light RAT that gives the server/attacker full remote access to the user's command-line interpreter cmd.exe. They are allowed to execute commands silently without the client/zombie noticing. The server/attacker is also given the ability to download and execute files on the...

redpill

:octocat: Description du projet Le projet redpill vise à assister les shells reverse TCP dans les tâches de post-exploitation. Souvent, lors de missions redteam, nous devons utiliser des moyens non conventionnels pour accéder au système cible, comme les shells reverse TCP pas metasploit afin de...

whids

ВАЖНО: этот README и другая документация не обновлены, чтобы отражать изменения, внесенные в последние бета-версии так как произошло много изменений. Всё это будет обновлено со временем, когда выйдет стабильная версия см. Дорожная карта до следующего релиза. Не стесняйтесь запускать бета-версии...

windiff

WinDiff À propos WinDiff est un outil open-source basé sur le web qui permet de naviguer et de comparer les informations de symboles, de types et d'appels système des binaires Microsoft Windows à travers différentes versions du système d'exploitation. La base de données de binaires est mise à jou...

CVE20131491-JIT

========================= Title ========================================= CVE-2013-1491 PoC using JIT-Spray by Yuki Chen 古河 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 Weibo: http://weibo.com/u/1874932054 ========================= About this PoC...

DarkFox

DarkFox Remote access trojan created using WinRar with an installer ex. firefox and python Reverse Shell embedded. Edit the client.py file by setting IP and port of the attacking Server listening and IP and port of any proxy present in the attack machine.If there is not a proxy comment the relati...

Follina-CVE-2022-30190-Unofficial-patch

Follina-CVE-2022-30190-Unofficial-patch- An Unofficial Patch Follina CVE-2022-30190 patch by microsoft Guidelines. for more details goto : https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ About Program this program creates a...

CVE-2024-24576-PoC

CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

SIGRed

CVE-2020-1350 AKA SIGRed v0.30 Summary: A Zeek package for detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 AKA SIGRed - CVE Score of 10.0 References:...

MS17-010

MS17-010 As all of our research is now in Metasploit master repository, there was no reason to confuse everyone by keeping this repository open as there were two versions of everything and due to overwhelming popularity support became a nightmare as this is merely a side project. Please do not ma...