chebuya / exploitsLinks
Repo for all my exploits/PoCs
☆51Updated 9 months ago
Alternatives and similar repositories for exploits
Users that are interested in exploits are comparing it to the libraries listed below
Sorting:
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆50Updated last year
- The tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.☆61Updated last year
- ☆59Updated last year
- Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure☆30Updated last year
- RCE PoC for Empire C2 framework <5.9.3☆28Updated last year
- ☆63Updated last month
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆70Updated 2 years ago
- PowerShell script to generate ShellCode in various formats☆46Updated last year
- CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)☆42Updated 11 months ago
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Updated 2 years ago
- A graphical automation to monitor if backdoors/default settings are still active on the compromised machines over time.☆45Updated last year
- Hunt for C2 servers and phishing web sites using VirusTotal API , you can modify code to kill the malicious process☆75Updated last year
- exfiltration/infiltration toolkit☆23Updated 2 years ago
- ☆48Updated 3 months ago
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Updated 2 years ago
- ☆42Updated last year
- List of some AD tools I frequently use☆56Updated 3 months ago
- Tamper Active Directory user attributes to collect their hashes with MS-SNTP☆61Updated last year
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆116Updated last year
- Proof of Concept Exploit for CVE-2024-9464☆45Updated last year
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆54Updated 2 years ago
- A proof-of-concept C2 channel through DuckDuckGo's image proxy service☆77Updated 2 years ago
- RCE through a race condition in Apache Tomcat☆56Updated last year
- ☆76Updated last year
- SpicyAD is a C# Active Directory penetration testing tool designed for authorized security assessments. It combines multiple AD attack te…☆97Updated last month
- POC for DLL Proxying / Hijacking☆63Updated 8 months ago
- SANS Workshop: Active Directory Privilege Escalation with Empire!☆35Updated 2 months ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42Updated last year
- Kooky cURL-powered replacement for reverse shell via /dev/tcp☆77Updated 2 weeks ago
- A small executable to trick a user to authenticate using code matching MFA☆69Updated 2 years ago