Repositories list

• NewRemotingTricks

  Public
  New exploitation tricks for hardened .NET Remoting servers

  C#

  •

  MIT License

  •2•7•0•0•Updated Jul 31, 2024Jul 31, 2024

• HttpRemotingObjRefLeak

  Public
  Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)

  Python

  •

  MIT License

  •14•86•1•0•Updated Mar 25, 2024Mar 25, 2024

• qubes-keepass

  Public
  rofi based frontend for KeePassXC running on Qubes OS

  password-managerrofikeepass+ 4qubes-osqubeskeepassxcqubesos

  Python

  •4•11•2•1•Updated Jan 29, 2024Jan 29, 2024

• qubes-yubioath

  Public
  rofi based frontend for OTP related functionality of yubikey-manager running on Qubes OS

  otpyubikeyauthenticator+ 4rofiqubes-osqubesyubikey-authenticators

  Python

  •0•2•0•0•Updated Jan 25, 2024Jan 25, 2024

• ExploitRemotingService

  Public
  A tool to exploit .NET Remoting Services

  C#

  •

  GNU General Public License v3.0

  •109•3•0•0•Updated Dec 1, 2023Dec 1, 2023

• apollon

  Public
  Proof-of-Concept to evade auditd by writing /proc/PID/mem

  monitoringdetectiondfir+ 5threat-huntingauditdevasionauditd-attacklinux-evasion

  C

  •7•19•0•0•Updated Aug 21, 2023Aug 21, 2023

• daphne

  Public
  Proof-of-Concept to evade auditd by tampering via ptrace

  monitoringdetectiondfir+ 5threat-huntingauditdevasionauditd-attacklinux-evasion

  C

  •3•16•0•0•Updated Aug 3, 2023Aug 3, 2023

• Lastenzug

  Public
  Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

  Go

  •32•212•1•0•Updated Oct 18, 2022Oct 18, 2022

• SysmonEnte

  Public
  C

  •6•68•1•0•Updated Oct 18, 2022Oct 18, 2022

• HandleKatz

  Public
  PIC lsass dumper using cloned handles

  C

  •103•574•1•1•Updated Oct 18, 2022Oct 18, 2022

• RogueRemotingServer

  Public
  C#

  •

  GNU General Public License v3.0

  •6•19•0•0•Updated Oct 18, 2022Oct 18, 2022

• LethalHTA

  Public
  Lateral Movement technique using DCOM and HTA

  C#

  •

  MIT License

  •44•229•0•0•Updated Oct 18, 2022Oct 18, 2022

• UnmarshalPwn

  Public
  POC for CVE-2018-0824

  C++

  •34•85•2•0•Updated Oct 18, 2022Oct 18, 2022

• ColdFusionPwn

  Public
  Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

  Java

  •

  MIT License

  •33•95•2•0•Updated Oct 18, 2022Oct 18, 2022

• groovy-2.4.5-exploit

  Public
  Java

  •5•9•0•0•Updated Oct 18, 2022Oct 18, 2022

• sap-p4-java-deserialization-exploit

  Public
  Exploit for SAP P4 Java Deserialization (http://codewhitesec.blogspot.com/2017/05/sap-customers-make-sure-your-sapjvm-is.html)

  Python

  •5•6•1•0•Updated Oct 18, 2022Oct 18, 2022

• ysoserial.net

  Public
  Deserialization payload generator for a variety of .NET formatters

  C#

  •

  MIT License

  •474•0•0•0•Updated Jan 27, 2022Jan 27, 2022