ejedev / web2shell
Automate converting webshells into reverse shells.
☆67Updated 2 weeks ago
Alternatives and similar repositories for web2shell:
Users that are interested in web2shell are comparing it to the libraries listed below
- Proof of Concept Exploit for PaperCut CVE-2023-27350☆51Updated last year
- Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…☆39Updated last year
- POC for a DLL spoofer to determine DLL Hijacking☆60Updated last year
- A Moodle Scanner☆39Updated 3 months ago
- linikatz is a tool to attack AD on UNIX☆143Updated last year
- A Proof-Of-Concept for the CVE-2023-43770 vulnerability.☆33Updated last year
- ☆27Updated last year
- A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.☆108Updated last month
- Automated exploitation of MSSQL servers at scale☆106Updated last month
- ☆105Updated 3 months ago
- WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…☆65Updated last year
- C2 Automation using Linode☆80Updated 2 years ago
- EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.☆63Updated 5 months ago
- A tool for quickly evaluating IAM permissions in AWS.☆57Updated last year
- A BurpSuite extension to deploy an OpenVPN config file to DigitalOcean and set up a SOCKS proxy to route traffic through it☆49Updated last year
- Kooky cURL-powered replacement for reverse shell via /dev/tcp☆65Updated last month
- ☆58Updated 4 months ago
- Exploits targeting vBulletin.☆76Updated last year
- Repo for all my exploits/PoCs☆47Updated last week
- A simple python script to dump remote files through a local file read or local file inclusion web vulnerability.☆67Updated 11 months ago
- Azure Service Subdomain Enumeration☆54Updated 6 months ago
- NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.☆63Updated last year
- Burp Suite Extension for inserting a magic byte into responder's request☆22Updated last year
- Small Script that permits to enumerate folders in Windows Defender Exclusion List with no Administrative privileges☆22Updated 3 months ago
- ☆54Updated 3 months ago
- Red Team "Drop and Run" NAC (802.1x) Bypass☆70Updated last year
- ☆51Updated last year
- Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure☆30Updated last year
- CVE-2023-34362: MOVEit Transfer Unauthenticated RCE☆62Updated 11 months ago
- Exploit for Symfony CVE-2024-50340 (forked eos)☆28Updated 3 months ago