Nicolas-Arsenault / Havoc-C2-RCE-2024
Abusing SSRF to deliver an authenticated command injection payload
☆29Updated last month
Alternatives and similar repositories for Havoc-C2-RCE-2024
Users that are interested in Havoc-C2-RCE-2024 are comparing it to the libraries listed below
Sorting:
- Cleo Unrestricted file upload and download PoC (CVE-2024-50623)☆23Updated 5 months ago
- Tool to aid in dumping LSASS process remotely☆38Updated 9 months ago
- ☆56Updated 6 months ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆49Updated 4 months ago
- Exploit for the CVE-2024-5806☆45Updated 10 months ago
- Microsoft Telnet Server MS-TNAP Authentication Bypass Exploit☆20Updated 2 weeks ago
- Proof of Concept Exploit for CVE-2024-9465☆29Updated 7 months ago
- SAM Dumping in C#☆48Updated 4 months ago
- An executable that simplifies adding the msds-AllowedToActOnBehalfOfOtherIdentity attribute for RBCD☆45Updated 2 months ago
- GenZ Shellcode Generator to execute commands with winExec API☆20Updated 2 weeks ago
- ☆22Updated 2 months ago
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆95Updated last year
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆57Updated last week
- Python tool to interact with WMI StdRegProv☆57Updated 5 months ago
- RCE PoC for Empire C2 framework <5.9.3☆27Updated last year
- Groovy Post Exploitation☆20Updated 6 months ago
- ☆52Updated 4 months ago
- Docker container for running CobaltStrike 4.10☆37Updated 7 months ago
- CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)☆37Updated 2 months ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆24Updated 7 months ago
- Office 365 and Exchange Enumeration Version 2☆18Updated last year
- Duplicate not owned Token from Running Process☆72Updated last year
- Proof of Concept Exploit for CVE-2024-9464☆45Updated 7 months ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆32Updated last year
- ☆55Updated 6 months ago
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆47Updated 4 months ago
- POC of GITHUB simple C2 in rust☆53Updated 3 months ago
- Winsocket for Cobalt Strike.☆98Updated last year
- RCE through a race condition in Apache Tomcat☆55Updated 4 months ago
- ownCloud exploits for CVE-2023-49105☆36Updated last year