A post-exploitation evasion tool to help users bypass AV/EDR protections.
A heapdump leads to Shiro key leaks causing a remote code execution (RCE) vulnerability environment.
Apache ActiveMQ Remote Code Execution (RCE) exploitation tool for specific ActiveMQ versions.
A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)
Pillager is an information gathering tool for post-exploitation purposes.
A community-driven project collecting details and exploitation methods for historical vulnerabilities.
A GitHub repository for the MS17-010 exploit, detailing methods to exploit CVE-2017-0143.
A vulnerable web application designed for web security penetration testing learners to practice and learn.
A GitHub repository for a custom plugin for the DBSyncer tool that allows for back-end exploitation.
新一代Webshell管理器,兼容蚁剑与冰蝎的PHP webshell
A tool to read ToDesk device codes and connection passwords through memory dumping.
A weak password generation tool suitable for penetration testing and red team operations.