Nicolas-Arsenault / Havoc-C2-RCE-2024Links
Abusing SSRF to deliver an authenticated command injection payload
☆30Updated last month
Alternatives and similar repositories for Havoc-C2-RCE-2024
Users that are interested in Havoc-C2-RCE-2024 are comparing it to the libraries listed below
Sorting:
- Exploit for the CVE-2024-5806☆45Updated last year
- Microsoft Telnet Client MS-TNAP Server-Side Authentication Token Exploit☆58Updated 5 months ago
- Cleo Unrestricted file upload and download PoC (CVE-2024-50623)☆24Updated 9 months ago
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆99Updated last year
- ☆89Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆58Updated 9 months ago
- An executable that simplifies adding the msds-AllowedToActOnBehalfOfOtherIdentity attribute for RBCD☆47Updated 7 months ago
- CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)☆41Updated 7 months ago
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆49Updated 2 months ago
- Privilege Escalation using Passwd - April Fools prank☆35Updated 6 months ago
- Winsocket for Cobalt Strike.☆100Updated 2 years ago
- Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.☆100Updated 3 months ago
- A Streamlined FTP-Driven Command and Control Conduit for Interconnecting Remote Systems.☆87Updated last year
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆59Updated 3 months ago
- To audit the security of read-only domain controllers☆117Updated last year
- ☆81Updated 4 months ago
- (MeetC2 a.k.a Meeting C2) - A framework abusing Google Calendar APIs.☆112Updated last month
- This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆78Updated last month
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆53Updated last year
- We found a way to DLL sideload with cleanmgr.exe☆96Updated 7 months ago
- CVE-2024-40711-exp☆42Updated 11 months ago
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆115Updated last year
- ☆59Updated 10 months ago
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆72Updated last year
- CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overfl…☆49Updated 8 months ago
- List of some AD tools I frequently use☆48Updated 4 months ago
- Execute commands in other Sessions☆89Updated last year
- A remote unauthenticated DOS POC exploit that targets the authentication implementation of Havoc.☆38Updated last year
- This tool, programmed in C#, allows for the fast discovery and exploitation of vulnerabilities in MSSQL servers☆53Updated last year
- Smart keylogging capability to steal SSH Credentials including password & Private Key☆145Updated 6 months ago