Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak NetNTLMv2 before the sandbox session is fully initialized.
☆32Jun 21, 2026Updated 4 months ago
Alternatives and similar repositories for UNCagedSandbox
Users that are interested in UNCagedSandbox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Smuggling C2 comms through links previews☆19Jun 17, 2026Updated 4 months ago
- CVE 1-day in http.sys☆42Sep 4, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆64Jul 22, 2026Updated 3 months ago
- Convert Microsoft Defender Antivirus Signatures (VDM) into a SQL DB☆26Jun 27, 2025Updated last year
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated 2 years ago
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- Rust-based Windows kernel driver research project with a companion user-mode client for IOCTL-based experiments with process, token, PPL,…☆20Apr 30, 2026Updated 6 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆165Jul 20, 2026Updated 3 months ago
- Evasive loader for .NET Framework assemblies☆53May 14, 2026Updated 5 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆94Sep 16, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20…☆36Feb 27, 2025Updated last year
- demo unhooking functions in ntdll☆28Jul 15, 2025Updated last year
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆48Oct 18, 2026Updated 3 weeks ago
- This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by …☆28Jul 15, 2026Updated 3 months ago
- Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. …☆58Oct 23, 2026Updated 2 weeks ago
- Azure apim mini proxy☆18Jun 12, 2026Updated 4 months ago
- This project is created for research into antivirus evasion by unhooking.☆17Sep 2, 2021Updated 5 years ago
- Debugger utilizing stealth hooks to hide from debugger detection☆28Aug 22, 2026Updated 2 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆76Jul 14, 2026Updated 3 months ago
- A WIP Mythic agent that uses Crystal Palace to build its payloads.☆17Jul 26, 2026Updated 3 months ago
- ☆40Jun 4, 2026Updated 5 months ago
- A repository with my code snippets for research/education purposes.☆52Jul 28, 2023Updated 3 years ago
- ☆37May 19, 2026Updated 5 months ago
- EDR-Redir : a tool used to redirect the EDR's folder to another location.☆247May 23, 2026Updated 5 months ago
- Versatile SOCKS5 proxying tool☆15Jun 28, 2026Updated 4 months ago
- macOS Container Payload Wrapper☆22Mar 13, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Post-ex tool to interact with chromium browser when CDP is enabled☆46May 15, 2026Updated 5 months ago
- A collection of BOF-PE's that allow running tailscale from memory☆141Aug 27, 2026Updated 2 months ago
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆87Oct 23, 2026Updated 2 weeks ago
- Load Encrypted Dll Using LoadLibraryA, Keep The Dll Encrypted on disc all the time and decrypt it only in memory.☆25Sep 5, 2021Updated 5 years ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- A simple reverse shell wrapped in TLS encyption written in C#☆10Jun 11, 2025Updated last year
- Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)☆20Aug 7, 2026Updated 3 months ago
Are these results useful?