sqrtZeroKnowledge / CVE-2023-23397_EXPLOIT_0DAY

Related projects: ⓘ

• SaadAhla / GithubC2
  Github as C2 Demonstration , free API = free C2 Infrastructure
  ☆128Updated last year
• mandiant / msi-search
  ☆260Updated last year
• Chocapikk / CVE-2023-29357
  Microsoft SharePoint Server Elevation of Privilege Vulnerability
  ☆222Updated 11 months ago
• Wh04m1001 / CVE-2024-20656
  ☆125Updated 8 months ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆301Updated last year
• BishopFox / cve-2024-21762-check
  Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762
  ☆93Updated 2 months ago
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆129Updated last month
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆139Updated 4 months ago
• kleiton0x00 / RemoteShellcodeExec
  Execute shellcode from a remote-hosted bin file using Winhttp.
  ☆219Updated last year
• powerseb / PowerExtract
  ☆110Updated last year
• synacktiv / GPOddity
  The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
  ☆259Updated 11 months ago
• D1rkMtr / FileLessRemoteShellcode
  ☆138Updated this week
• MrEmpy / Reaper
  「💀」Proof of concept on BYOVD attack
  ☆147Updated 6 months ago
• SaadAhla / DocPlz
  Documents Exfiltration project for fun and educational purposes
  ☆145Updated 11 months ago
• MrEmpy / Awesome-AV-EDR-XDR-Bypass
  Awesome AV/EDR/XDR Bypass Tips
  ☆244Updated last year
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆144Updated 4 months ago
• ph4nt0mbyt3 / Darkside
  C# AV/EDR Killer using less-known driver (BYOVD)
  ☆144Updated 10 months ago
• Flangvik / ObfuscatedSharpCollection
  Attempt at Obfuscated version of SharpCollection
  ☆188Updated this week
• improsec / BackupOperatorToolkit
  The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin
  ☆164Updated last year
• s1ckb017 / PoC-CVE-2022-26809
  PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.
  ☆107Updated 2 years ago
• Orange-Cyberdefense / LinikatzV2
  linikatz is a tool to attack AD on UNIX
  ☆134Updated 11 months ago
• slemire / WSPCoerce
  PoC to coerce authentication from Windows hosts using MS-WSP
  ☆218Updated last year
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆141Updated last year
• sliverarmory / armory
  The Official Sliver Armory
  ☆80Updated last month
• NUL0x4C / NoRunPI
  Run Your Payload Without Running Your Payload
  ☆174Updated last year
• WKL-Sec / WMIExec
  Set of python scripts which perform different ways of command execution via WMI protocol.
  ☆157Updated last year
• trevorsaudi / Mshikaki
  A shellcode injection tool showcasing various process injection techniques
  ☆133Updated 9 months ago
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆114Updated 2 months ago
• MzHmO / LeakedWallpaper
  Leak of any user's NetNTLM hash. Fixed in KB5040434
  ☆214Updated last month
• yehia-mamdouh / Shell3er
  PowerShell Reverse Shell
  ☆60Updated last year