4v4loon Goto Github PK

chacal

Golang anti-vm framework for Red Team and Pentesters

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

chrome-sbx-db

A Collection of Chrome Sandbox Escape POCs/Exploits for learning

chromebackdoor

Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.

cimsweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

cobaltstrike4.0

收集的CobaltStrike4.0

copycat

Universal MITM web server

corsy

CORS Misconfiguration Scanner

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

covert-tube

Youtube as covert-channel - Control systems remotely and execute commands by uploading videos to Youtube

covertutils

A framework for Backdoor development!

creak

Poison, reset, spoof, redirect MITM script

credphish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

cve-2015-1805

cve-2015-3636

Expolit for android (goldfish kernel v3.10.0+) on arm64 with PXN&SELinux Bypassed. Based on fi01's code.

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration.

cve-2017-11882

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

cve-2017-11882-metasploit

This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.

cve-2019-2215

cve-2019-2216

Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215

cve-2020-0041

Exploits for Android Binder bug CVE-2020-0041

cve-2020-0683

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

cve-2020-0688

cve-2020-0688

cve-2020-0796-rce-poc

CVE-2020-0796 Remote Code Execution POC

cve-2020-1054

LPE for CVE-2020-1054 targeting Windows 7 x64

cve-2020-1055

cve-2020-1350

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

cve-2021-1675

C# and Impacket implementation of CVE-2021-1675/PrintNightmare