Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak NetNTLMv2 before the sandbox session is fully initialized.
☆32Jun 21, 2026Updated 4 months ago
Alternatives and similar repositories for UNCagedSandbox
Users that are interested in UNCagedSandbox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- ☆19Mar 19, 2026Updated 7 months ago
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆62Jul 22, 2026Updated 2 months ago
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Debugger utilizing stealth hooks to hide from debugger detection☆25Aug 22, 2026Updated last month
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- CVE-2026-45504 Microsoft Exchange File Read☆64Jun 24, 2026Updated 3 months ago
- Command and control framework☆40Jun 20, 2026Updated 4 months ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated 2 years ago
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆34Oct 14, 2026Updated last week
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆29Updated this week
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆14Jul 17, 2026Updated 3 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 2 months ago
- ☆39Aug 13, 2026Updated 2 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 3 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆49Updated this week
- Azure apim mini proxy☆18Jun 12, 2026Updated 4 months ago
- ☆37May 19, 2026Updated 5 months ago
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆47Jun 18, 2026Updated 4 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆18Oct 3, 2026Updated 2 weeks ago
- CVE-2026-8452 PreAuth RCE☆65Aug 14, 2026Updated 2 months ago
- A collection of BOF-PE's that allow running tailscale from memory☆142Aug 27, 2026Updated last month
- Smb Quic Replay Tool is an tool for Replay SMB protocol over QUIC support Windows 11☆12Mar 6, 2025Updated last year
- Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.☆27Sep 30, 2026Updated 2 weeks ago
- ☆33Jun 12, 2026Updated 4 months ago
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 6 months ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆90Aug 1, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆12Apr 7, 2022Updated 4 years ago
- Decrypts and extracts tokens from TokenBroker cache files in Windows☆14May 20, 2025Updated last year
- Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.☆23Jul 11, 2026Updated 3 months ago
- Attack techniques for threat emulation in VMware environments☆55Aug 25, 2026Updated last month
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆54Jun 28, 2026Updated 3 months ago
- SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections.☆41Aug 3, 2026Updated 2 months ago
- Evasive loader for .NET Framework assemblies☆53May 14, 2026Updated 5 months ago