Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)
☆92Mar 25, 2024Updated 2 years ago
Alternatives and similar repositories for HttpRemotingObjRefLeak
Users that are interested in HttpRemotingObjRefLeak are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.☆246Oct 8, 2024Updated 2 years ago
- tetctf2020_amf_writeups☆20Jan 3, 2021Updated 5 years ago
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆116Jul 17, 2024Updated 2 years ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆249Jun 11, 2024Updated 2 years ago
- An App Domain Manager Injection DLL PoC on steroids☆241Dec 14, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆25Apr 28, 2024Updated 2 years ago
- ☆60Jan 9, 2023Updated 3 years ago
- .NET deserialization hunter☆91Jul 21, 2024Updated 2 years ago
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- A PoC .NET-specific process injection tool☆59Mar 17, 2024Updated 2 years ago
- A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation☆38Jul 30, 2026Updated 3 months ago
- Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.☆85May 7, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆20Aug 28, 2026Updated 2 months ago
- Lateral Movement via the .NET Profiler☆99Nov 21, 2024Updated last year
- An implementation of an indirect system call☆133Aug 25, 2023Updated 3 years ago
- 一款基于James Forshaw的.NET Remoting反序列化工具升级版在TypeFilterLevel.Low模式无文件payload任意代码执行poc的开发心得☆48Jan 23, 2025Updated last year
- Microsoft SharePoint Server Elevation of Privilege Vulnerability☆237Sep 26, 2023Updated 3 years ago
- POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon☆108Mar 14, 2023Updated 3 years ago
- ☆30Jul 26, 2024Updated 2 years ago
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆124Feb 13, 2023Updated 3 years ago
- ☆32Jun 1, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- DirSync is a simple proof of concept PowerShell module to demonstrate the impact of delegating DS-Replication-Get-Changes and DS-Replicat…☆31Apr 26, 2023Updated 3 years ago
- A Custom CLR Assembly for MSSQL of the popular tool GodPotato☆84Jun 19, 2023Updated 3 years ago
- Local & remote Windows DLL Proxying☆171Jun 17, 2024Updated 2 years ago
- ☆247May 5, 2024Updated 2 years ago
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- ☆90Jul 28, 2022Updated 4 years ago
- ZDI presentations, publications, whitepapers etc☆62Nov 20, 2024Updated last year
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆47Mar 15, 2023Updated 3 years ago
- Proof-of-Concept to evade auditd by writing /proc/PID/mem☆24Aug 21, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆760Jul 10, 2026Updated 3 months ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆159Nov 7, 2023Updated 2 years ago
- a short C code POC to gain persistence and evade sysmon event code registry (creation, update and deletion) REG_NOTIFY_CLASS Registry Cal…☆66Aug 23, 2023Updated 3 years ago
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆50Jan 12, 2025Updated last year
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆110Jan 30, 2025Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆146Dec 16, 2023Updated 2 years ago