A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret (SDS) from Chrome process memory, and the decryption of synced GPM passkeys.
☆27Oct 30, 2026Updated this week
Alternatives and similar repositories for pass-ta-key
Users that are interested in pass-ta-key are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆55Updated this week
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- ☆37May 19, 2026Updated 5 months ago
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆86Oct 23, 2026Updated last week
- ☆37Sep 6, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆75Oct 18, 2026Updated 2 weeks ago
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆139Updated this week
- A minimized non-intrusive version of EDR Introspection☆46Jun 30, 2026Updated 4 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- Powershell & Javascript Obfuscator☆50Aug 24, 2026Updated 2 months ago
- ☆44Oct 27, 2026Updated last week
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆48Oct 18, 2026Updated 2 weeks ago
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- CVE-85884 POC☆36Oct 13, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Local Windows credential extraction☆26Jul 14, 2026Updated 3 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆103Oct 27, 2026Updated last week
- Reflective DLL loader.☆27Jun 30, 2026Updated 4 months ago
- Phantom is project created to perform loading and executing unmanaged code in memory within an IIS environment running in full‑trust mode…☆108Jun 5, 2026Updated 4 months ago
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go…☆39Oct 7, 2026Updated 3 weeks ago
- CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress☆29Updated this week
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free…☆21Sep 18, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- ☆31Jul 24, 2026Updated 3 months ago
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆23Oct 23, 2026Updated last week
- Enhanced, Faster, Better version of the exploit☆26Dec 27, 2025Updated 10 months ago
- krbrelayx fork that defeats enforced SMB signing on an SMB relay (opt-in --reauth-bypass).☆73Oct 21, 2026Updated last week
- Clean Indirect Syscalls with Syscall Tampering.☆51Oct 25, 2026Updated last week
- In-process Kerberos user enumeration and password attacks for AdaptixC2 — no process spawn, no file drop.☆17Sep 27, 2026Updated last month
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆40Oct 14, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A reflective DLL development template for the Rust programming language☆123Nov 4, 2025Updated 11 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆95Sep 16, 2026Updated last month
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- php2shell WordPress RCE proof of concept (PHP 8.3.35 / WordPress 7.1.2)☆35Oct 23, 2026Updated last week
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆70Oct 7, 2026Updated 3 weeks ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago