miko550 Goto Github PK

android-spyware

Rails c&c web application for spying Android devices

antimalwareblight

Execute PowerShell code at the antimalware-light protection level.

aviator

Antivirus evasion project

batchguard

Batch file AV evasion and obfuscation solution

beacon_notify

New beacon notifications in Cobalt Strike for Microsoft Teams

binarytoshellcode

Convert available made paylaod to hex shellcode format

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

botpeass

Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.

callstackspoofer

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

codecepticon

cve

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

cve-2016-5734-docker

PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability (CVE-2016-5734)

cve-2017-7269

cve-2021-25003

WPCargo < 6.9.0 - Unauthenticated RCE

cve-2021-3129

Laravel RCE (CVE-2021-3129)

cve-2021-39144-xstream-rce

{VMware Cloud Foundation} remote code execution vulnerability via XStream (CVE-2021-39144)

cve-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

cve-2021-40445

CVE-2021-40444 PoC

cve-2021-44228

A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell

cve-2022-1388_poc

F5 BIG-IP RCE exploitation (CVE-2022-1388)

cve-2022-1802

cve-2022-21881

POC of CVE-2022-21881 exploited at TianfuCup 2021 to escape Chrome Sandbox

cve-2022-23222

CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

cve-2022-23614

PoC for CVE-2022-23614 (Twig sort filter code execution/sandbox bypass)

cve-2022-24086-poc

Verifed Proof of Concept on CVE-2022-24086 RCE

cve-2022-24124_poc

Casdoor是一个基于OAuth 2.0/OIDC 的中心化的单点登录（SSO）身份验证平台，此漏洞属于Sql注入漏洞，在查询API 存在与字段和值参数相关的SQL注入漏洞

cve-2022-24706

Apache CouchDB 3.2.1 - Remote Code Execution (RCE)

cve-2022-26134-godzilla-memshell

cve-2022-26138

Confluence Hardcoded Password POC