One of the most powerful primitives for Windows default configuration LPE
☆53Nov 12, 2026Updated this week
Alternatives and similar repositories for CVE-2026-88235
Users that are interested in CVE-2026-88235 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- High-performance, memory-safe pure-Rust redesign of Impacket protocols and Active Directory tools for Linux, macOS, and Windows.☆86Updated this week
- Evasive fork of Donut to generate position-independent shellcode that loads PE Windows payloads from memory☆74Nov 6, 2026Updated last week
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆108Nov 4, 2026Updated last week
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆64Nov 1, 2026Updated last week
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆35Aug 8, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Mythic Agent to perform Breach & Attack Simulations☆37Updated this week
- Rust attack-path analysis for AD, ADCS and Entra ID☆47Updated this week
- Remote process injection via TP_DIRECT.Callback hijack☆42Oct 30, 2026Updated 2 weeks ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆81Oct 18, 2026Updated 3 weeks ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- WinRM pass-the-hash BOF with NTLMv2 authentication and signed, encrypted WSMan traffic☆21Updated this week
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆110Oct 27, 2026Updated 2 weeks ago
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆59Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 3 weeks ago
- Collect Defender Telemetry/Logs☆28Nov 4, 2026Updated last week
- A BOF to create a scheduled task using a COM object.☆24Sep 1, 2026Updated 2 months ago
- Windows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI …☆25Updated this week
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆78Oct 10, 2026Updated last month
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 3 months ago
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆25Jul 31, 2026Updated 3 months ago
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆39Feb 17, 2026Updated 8 months ago
- Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxi…☆81Nov 4, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An Ansible collection that installs an SCCM deployment with optional configurations.☆18Oct 22, 2026Updated 3 weeks ago
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆25Aug 20, 2026Updated 2 months ago
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆50Oct 18, 2026Updated 3 weeks ago
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆113Jul 26, 2026Updated 3 months ago
- Post-ex tool to interact with chromium browser when CDP is enabled☆47Updated this week
- Application-scoped Windows network brownouts in native C and BOF form☆23Aug 18, 2026Updated 2 months ago
- open-source pentest management built to be operated by an AI agent☆30Sep 1, 2026Updated 2 months ago
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 11 months ago
- ☆19Dec 11, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Tools for CES abuse☆51Sep 29, 2026Updated last month
- A Windows rootkit that turns user-land processes into Protected Processes☆30Nov 16, 2024Updated last year
- Versatile SOCKS5 proxying tool☆16Jun 28, 2026Updated 4 months ago
- ☆81Dec 19, 2024Updated last year
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆41Oct 14, 2026Updated last month
- ☆40Sep 25, 2026Updated last month
- ☆36Nov 1, 2026Updated last week
Are these results useful?