Repositories list

• NewRemotingTricks

  Public
  New exploitation tricks for hardened .NET Remoting servers

  C#

  •

  MIT License

  •1010 forks•3333 stars•00 issues•00 pull requests•Updated Aug 5, 2025Aug 5, 2025

• dsm

  Public
  C

  •00 forks•55 stars•00 issues•00 pull requests•Updated May 13, 2025May 13, 2025

• qubes-keepass

  Public
  rofi based frontend for KeePassXC running on Qubes OS

  password-managerrofikeepass+ 4

  password-managerrofikeepassqubes-osqubeskeepassxcqubesos

  Python

  •55 forks•1818 stars•22 issues•11 pull request•Updated Feb 28, 2025Feb 28, 2025

• HttpRemotingObjRefLeak

  Public
  Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)

  Python

  •

  MIT License

  •1414 forks•9292 stars•11 issue•00 pull requests•Updated Mar 25, 2024Mar 25, 2024

• qubes-yubioath

  Public
  rofi based frontend for OTP related functionality of yubikey-manager running on Qubes OS

  otpyubikeyauthenticator+ 4

  otpyubikeyauthenticatorrofiqubes-osqubesyubikey-authenticators

  Python

  •00 forks•22 stars•00 issues•00 pull requests•Updated Jan 25, 2024Jan 25, 2024

• ExploitRemotingService

  Public
  A tool to exploit .NET Remoting Services

  C#

  •

  GNU General Public License v3.0

  •109109 forks•33 stars•00 issues•00 pull requests•Updated Dec 1, 2023Dec 1, 2023

• apollon

  Public
  Proof-of-Concept to evade auditd by writing /proc/PID/mem

  monitoringdetectiondfir+ 5

  monitoringdetectiondfirthreat-huntingauditdevasionauditd-attacklinux-evasion

  C

  •66 forks•2424 stars•11 issue•00 pull requests•Updated Aug 21, 2023Aug 21, 2023

• daphne

  Public
  Proof-of-Concept to evade auditd by tampering via ptrace

  monitoringdetectiondfir+ 5

  monitoringdetectiondfirthreat-huntingauditdevasionauditd-attacklinux-evasion

  C

  •44 forks•1919 stars•00 issues•00 pull requests•Updated Aug 3, 2023Aug 3, 2023

• Lastenzug

  Public
  Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

  Go

  •3434 forks•234234 stars•11 issue•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• SysmonEnte

  Public
  C

  •77 forks•8484 stars•22 issues•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• HandleKatz

  Public
  PIC lsass dumper using cloned handles

  C

  •109109 forks•598598 stars•11 issue•11 pull request•Updated Oct 18, 2022Oct 18, 2022

• RogueRemotingServer

  Public
  C#

  •

  GNU General Public License v3.0

  •66 forks•2424 stars•00 issues•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• LethalHTA

  Public
  Lateral Movement technique using DCOM and HTA

  C#

  •

  MIT License

  •4242 forks•233233 stars•00 issues•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• UnmarshalPwn

  Public
  POC for CVE-2018-0824

  C++

  •3030 forks•8787 stars•22 issues•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• ColdFusionPwn

  Public
  Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

  Java

  •

  MIT License

  •2929 forks•9595 stars•22 issues•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• groovy-2.4.5-exploit

  Public
  Java

  •55 forks•99 stars•00 issues•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• sap-p4-java-deserialization-exploit

  Public
  Exploit for SAP P4 Java Deserialization (http://codewhitesec.blogspot.com/2017/05/sap-customers-make-sure-your-sapjvm-is.html)

  Python

  •22 forks•66 stars•11 issue•00 pull requests•Updated Oct 18, 2022Oct 18, 2022

• ysoserial.net

  Public
  Deserialization payload generator for a variety of .NET formatters

  C#

  •

  MIT License

  •524524 forks•00 stars•00 issues•00 pull requests•Updated Jan 27, 2022Jan 27, 2022