Abusing SSRF to deliver an authenticated command injection payload
☆28Sep 1, 2025Updated last year
Alternatives and similar repositories for Havoc-C2-RCE-2024
Users that are interested in Havoc-C2-RCE-2024 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SANS Workshop: Active Directory Privilege Escalation with Empire!☆36Nov 12, 2025Updated 11 months ago
- A PoC that uses the DirSync protocol to poll Active Directory for changes☆13Aug 16, 2020Updated 6 years ago
- 读取微信联系人列表，版本（3.9.12.51）☆13Mar 22, 2025Updated last year
- A PoC for the dMSA Active Directory Domain Takeover deemed BadSuccessor☆61Mar 6, 2026Updated 7 months ago
- ☆32Jun 1, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- byebyeAV is a tool created by @amroes which bypassed the latest version at the time of windows defender, Sophos and Kaspersky☆14Sep 5, 2025Updated last year
- A malware analysis and reverse-engineering skill package for Claude, Codex, and Gemini☆21May 9, 2026Updated 5 months ago
- ZoomBotC2 is a stealthy Command and Control (C2) framework that leverages Zoom's API endpoints for covert communication between implants …☆57Jun 30, 2025Updated last year
- 🛡️ Assign AD permissions via PowerShell templates — Simplify and standardize AD delegation with reusable PowerShell templates.☆30Apr 12, 2026Updated 6 months ago
- Run shellcode via EnumDesktopsA. C++ implementation☆13Jun 27, 2022Updated 4 years ago
- ☆64Oct 27, 2026Updated last week
- Malware dev tricks: parent PID spoofing. C++ implementation☆12Sep 7, 2022Updated 4 years ago
- 基于Go和YARA规则 对windows进程和文件进行检测☆18Sep 20, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- ☆96Apr 7, 2026Updated 6 months ago
- JA4 proxy tooling.☆27Feb 10, 2026Updated 8 months ago
- Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - Remote Code Execution - Shell Script☆16May 13, 2018Updated 8 years ago
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret (SDS) from Ch…☆27Updated this week
- Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆20Jul 8, 2022Updated 4 years ago
- Malware dev. Run shellcode via EnumChildWindows. C++ implementation☆13Jul 14, 2022Updated 4 years ago
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆47Oct 20, 2025Updated last year
- Pink BRC4 skin/theme.☆15Sep 20, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- APT techniques: Token theft via UpdateProcThreadAttribute. C++ implementation☆11Oct 29, 2022Updated 4 years ago
- Arsenal of modules to beacon postex☆106Mar 13, 2026Updated 7 months ago
- ☆20Oct 10, 2025Updated last year
- Just another AD training, but free.☆19Aug 9, 2025Updated last year
- ☆27Jan 23, 2025Updated last year
- This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)☆74Mar 17, 2025Updated last year
- NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally develope…☆47Jul 1, 2026Updated 4 months ago
- ☆20Nov 8, 2020Updated 5 years ago
- Neo4LDAP is a query and visualization tool focused on Active Directory environments. It combines LDAP syntax with graph-based data analys…☆101Jul 10, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Enumerate the Domain for Readable and Writable Shares☆24Oct 15, 2026Updated 2 weeks ago
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆55Updated this week
- Templates for developing your own listeners and agents for AdaptixC2.☆64Sep 6, 2026Updated last month
- Azure apim mini proxy☆18Jun 12, 2026Updated 4 months ago
- ProfileHound - BloodHound OpenGraph collector for user profiles stored on domain machines. Make informed decisions about looting secrets …☆163Jul 8, 2026Updated 3 months ago
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆19Jun 20, 2025Updated last year
- Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)☆19Aug 2, 2024Updated 2 years ago