Nicolas-Arsenault / Havoc-C2-RCE-2024Links
Abusing SSRF to deliver an authenticated command injection payload
☆30Updated 2 months ago
Alternatives and similar repositories for Havoc-C2-RCE-2024
Users that are interested in Havoc-C2-RCE-2024 are comparing it to the libraries listed below
Sorting:
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆101Updated last year
- Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.☆100Updated 5 months ago
- This is a GRE PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆90Updated 2 months ago
- CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overfl…☆51Updated 10 months ago
- Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN)☆76Updated last year
- Exploit for the CVE-2024-5806☆45Updated last year
- Microsoft Telnet Client MS-TNAP Server-Side Authentication Token Exploit☆61Updated 6 months ago
- ☆59Updated last year
- A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)☆60Updated 4 months ago
- ☆59Updated last year
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆116Updated last year
- Hunt for C2 servers and phishing web sites using VirusTotal API , you can modify code to kill the malicious process☆71Updated last year
- Cleo Unrestricted file upload and download PoC (CVE-2024-50623)☆24Updated 11 months ago
- CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)☆41Updated 9 months ago
- Tool to aid in dumping LSASS process remotely☆42Updated last month
- (MeetC2 a.k.a Meeting C2) - A framework abusing Google Calendar APIs.☆123Updated 2 months ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Updated 2 years ago
- Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation☆77Updated this week
- Winsocket for Cobalt Strike.☆101Updated 2 years ago
- Smart keylogging capability to steal SSH Credentials including password & Private Key☆146Updated 7 months ago
- We found a way to DLL sideload with cleanmgr.exe☆95Updated 8 months ago
- Go Shellcode Loader to be Integrated in Exploration C2☆28Updated 9 months ago
- ☆86Updated 6 months ago
- SAM Dumping in C#☆54Updated 10 months ago
- CVE-2025-33053 Proof Of Concept (PoC)☆60Updated 5 months ago
- A remote unauthenticated DOS POC exploit that targets the authentication implementation of Havoc.☆38Updated 2 years ago
- An executable that simplifies adding the msds-AllowedToActOnBehalfOfOtherIdentity attribute for RBCD☆49Updated 8 months ago
- RCE PoC for Empire C2 framework <5.9.3☆29Updated last year
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆48Updated 10 months ago
- A lightweight tool that injects a custom assembly proxy into a target process to silently bypass AMSI scanning by redirecting AmsiScanBuf…☆61Updated 6 months ago