Repositories list

• NewRemotingTricks

  Public
  New exploitation tricks for hardened .NET Remoting servers

  C#

  •

  MIT License

  •9•32•0•0•Updated Aug 5, 2025Aug 5, 2025

• dsm

  Public
  C

  •0•5•0•0•Updated May 13, 2025May 13, 2025

• qubes-keepass

  Public
  rofi based frontend for KeePassXC running on Qubes OS

  password-managerrofikeepass+ 4

  password-managerrofikeepassqubes-osqubeskeepassxcqubesos

  Python

  •6•17•2•1•Updated Feb 28, 2025Feb 28, 2025

• HttpRemotingObjRefLeak

  Public
  Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)

  Python

  •

  MIT License

  •14•92•1•0•Updated Mar 25, 2024Mar 25, 2024

• qubes-yubioath

  Public
  rofi based frontend for OTP related functionality of yubikey-manager running on Qubes OS

  otpyubikeyauthenticator+ 4

  otpyubikeyauthenticatorrofiqubes-osqubesyubikey-authenticators

  Python

  •0•2•0•0•Updated Jan 25, 2024Jan 25, 2024

• ExploitRemotingService

  Public
  A tool to exploit .NET Remoting Services

  C#

  •

  GNU General Public License v3.0

  •110•3•0•0•Updated Dec 1, 2023Dec 1, 2023

• apollon

  Public
  Proof-of-Concept to evade auditd by writing /proc/PID/mem

  monitoringdetectiondfir+ 5

  monitoringdetectiondfirthreat-huntingauditdevasionauditd-attacklinux-evasion

  C

  •7•25•1•0•Updated Aug 21, 2023Aug 21, 2023

• daphne

  Public
  Proof-of-Concept to evade auditd by tampering via ptrace

  monitoringdetectiondfir+ 5

  monitoringdetectiondfirthreat-huntingauditdevasionauditd-attacklinux-evasion

  C

  •4•19•0•0•Updated Aug 3, 2023Aug 3, 2023

• Lastenzug

  Public
  Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

  Go

  •34•234•1•0•Updated Oct 18, 2022Oct 18, 2022

• SysmonEnte

  Public
  C

  •7•78•2•0•Updated Oct 18, 2022Oct 18, 2022

• HandleKatz

  Public
  PIC lsass dumper using cloned handles

  C

  •109•594•1•1•Updated Oct 18, 2022Oct 18, 2022

• RogueRemotingServer

  Public
  C#

  •

  GNU General Public License v3.0

  •6•24•0•0•Updated Oct 18, 2022Oct 18, 2022

• LethalHTA

  Public
  Lateral Movement technique using DCOM and HTA

  C#

  •

  MIT License

  •44•235•0•0•Updated Oct 18, 2022Oct 18, 2022

• UnmarshalPwn

  Public
  POC for CVE-2018-0824

  C++

  •33•88•2•0•Updated Oct 18, 2022Oct 18, 2022

• ColdFusionPwn

  Public
  Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

  Java

  •

  MIT License

  •33•96•2•0•Updated Oct 18, 2022Oct 18, 2022

• groovy-2.4.5-exploit

  Public
  Java

  •5•9•0•0•Updated Oct 18, 2022Oct 18, 2022

• sap-p4-java-deserialization-exploit

  Public
  Exploit for SAP P4 Java Deserialization (http://codewhitesec.blogspot.com/2017/05/sap-customers-make-sure-your-sapjvm-is.html)

  Python

  •5•6•1•0•Updated Oct 18, 2022Oct 18, 2022

• ysoserial.net

  Public
  Deserialization payload generator for a variety of .NET formatters

  C#

  •

  MIT License

  •523•0•0•0•Updated Jan 27, 2022Jan 27, 2022