This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via RPC calls.
☆28Jul 15, 2026Updated 3 months ago
Alternatives and similar repositories for rapid7-CVE-2026-15409
Users that are interested in rapid7-CVE-2026-15409 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆22May 7, 2026Updated 5 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Azure apim mini proxy☆18Jun 12, 2026Updated 4 months ago
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Azure apim mini proxy☆64Aug 10, 2026Updated 2 months ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- ☆24Feb 27, 2026Updated 8 months ago
- This repo contains useful scripts that AI created for me which I would have been too lazy for☆107Jun 30, 2026Updated 3 months ago
- Smb Quic Replay Tool is an tool for Replay SMB protocol over QUIC support Windows 11☆12Mar 6, 2025Updated last year
- A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN☆223Jan 26, 2026Updated 9 months ago
- Kerberos CNAME abuse PoC☆109Jan 27, 2026Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- A remote live memory viewer PoC based on the MongoBleed vulnerability primitive!☆31Apr 7, 2026Updated 6 months ago
- A set of tools and exploits to cause DoS for remote Windows Server & Windows 11 machines☆33Feb 9, 2026Updated 8 months ago
- ☆16Aug 5, 2026Updated 2 months ago
- ADCSGoat: A Deliberately Vulnerable Active Directory Certificate Services Lab☆21Updated this week
- A critical RCE vulnerability in Windows TCP/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to hija…☆33Sep 16, 2025Updated last year
- ☆52Jun 6, 2025Updated last year
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆50Aug 13, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Security research helper for CLFS drivers☆16Sep 5, 2024Updated 2 years ago
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆34Oct 14, 2026Updated 2 weeks ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆233Jun 2, 2026Updated 4 months ago
- CVE-2026-46242☆21Jul 4, 2026Updated 3 months ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆21Oct 15, 2026Updated 2 weeks ago
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆145Jul 7, 2026Updated 3 months ago
- Toolkit for Windows internals, vulnerability analysis, and reproducible security research workflows.☆66Jun 23, 2026Updated 4 months ago
- Extract DPAPI CREDHIST and Masterkey hashes☆23May 28, 2026Updated 5 months ago
- ☆19Jan 8, 2026Updated 9 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Power Automate C2 (PAC2) : Stealth living-off-the-cloud C2 framework.☆40Apr 16, 2024Updated 2 years ago
- Handle Redirect via BYOVD Kernel Read/Write☆19Sep 13, 2026Updated last month
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 9 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- Corscan is a Go-based tool that automates the detection and exploitation of CORS misconfigurations. It performs intelligent analysis of A…☆11Jul 16, 2025Updated last year
- ☆99Apr 14, 2026Updated 6 months ago
- Fuzzing Framework for Modules in Apache HTTPD Server☆22Jun 13, 2026Updated 4 months ago