Arbitrary file read exploit for the Windows UPnP Device Host service.
☆20Jun 5, 2026Updated 4 months ago
Alternatives and similar repositories for UPnPHostFileRead
Users that are interested in UPnPHostFileRead are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability☆24Feb 5, 2025Updated last year
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 6 months ago
- Extract PRT cookies remotely with InteractiveToken Scheduled Tasks☆15Aug 13, 2026Updated 2 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆21Oct 4, 2026Updated 3 weeks ago
- TheDarkMark is a C2 framework designed to be fast and parallel.☆25Jul 21, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- Project Sato - C2☆10Apr 24, 2025Updated last year
- ☆33Oct 19, 2024Updated 2 years ago
- A python tool to parse and describe the contents of a raw ntSecurityDescriptor structure.☆30May 1, 2026Updated 5 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆48Jun 18, 2026Updated 4 months ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆48Aug 20, 2026Updated 2 months ago
- Process dumper wrote in rust.☆14Sep 16, 2024Updated 2 years ago
- RunPE implementation with multiple evasive techniques (2)☆14Sep 25, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆16Jun 15, 2025Updated last year
- Volume Shadow Copy Explorer☆18Nov 23, 2025Updated 11 months ago
- Load various payload (DLL from memory, Exe, etc...) in a way to evade static analysis of Antivirus. It can fetch data from various method…☆22Jun 18, 2026Updated 4 months ago
- A toolkit for testing and benchmarking WPI techniques☆22Sep 2, 2026Updated last month
- POC for CVE-2025-54918 and a technical demonstration.☆65Jan 12, 2026Updated 9 months ago
- ☆41Nov 25, 2025Updated 11 months ago
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 10 months ago
- Docker container for running CobaltStrike 4.10☆38Sep 18, 2024Updated 2 years ago
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆34Aug 8, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3☆10Apr 19, 2025Updated last year
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Evasion kit for Cobalt Strike☆16Aug 13, 2026Updated 2 months ago
- A python script that automates a C2 Profile build☆49Jul 21, 2026Updated 3 months ago
- An advanced C++ framework for WoW64 Heaven’s Gate + Indirect Syscall, X64 Hell's Gate, and EDR evasion. Seamlessly load 64-bit kernel32 a…☆21May 8, 2026Updated 5 months ago
- ETWhat is a Windows utility that determines whether Event Tracing for Windows (ETW) providers operate in kernel mode or user mode.☆10Jun 9, 2025Updated last year
- Active network shares enumeration tool.☆39Jul 17, 2026Updated 3 months ago
- A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆40Mar 6, 2025Updated last year
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- ☆13Feb 12, 2026Updated 8 months ago
- a short script to make my life easy : ) nothing more☆13Jul 6, 2026Updated 3 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- Upgraded IPv6/IPv4 LLMNR/NBT-NS/mDNS Poisoner - Responder on steroids.☆58Aug 18, 2026Updated 2 months ago
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆29Oct 16, 2026Updated last week
- ☆10Aug 24, 2025Updated last year