Chokri Hammedi

uac-bypass-oneliners. Collection of one-liners to bypass User Account Control (UAC) in Windows. These techniques exploit certain behavior in Windows applications to elevate privileges.

Arescan. Arescan is a powerful web directory discovery tool that helps you uncover hidden directories and links on any website. By performing a breadth-first search.

mobilemouse-exploit. Mobile Mouse 3.6.0.4 could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

rosemary. Rosemary: Cross-platform transparent network tunneling over QUIC. No TUN/TAP. No proxychains. No proxy settings.

Clover. Clover P2P Reverse Shell allows you to establish a a decentralized peer-to-peer (P2P) connection between two computers and execute shell commands on the remote computer.

awesome-curl-reverseshell-oneliners. Collection of efficient curl one-liners for executing reverse shells, ideal for development and security testing.

windows-linux-php-reverse-shell. This is a simple PHP reverse shell that works on both Windows and Linux systems. It lets you specify the operating system via a query parameter, and will execute a PowerShell reverse shell on Windows or a bash reverse shell on Linux.

cothon. cothon framework: A stealthy command & control (C2) framework designed for ethical penetration testing and red team operations.

Sisyphus. Sisyphus is a simple reverse shell implementation using ZeroMQ

nimrm. Native Nim WinRM shell with NTLM, Kerberos, file transfer, in-memory helpers, and AD/OPSEC reporting

xpath. xpath is a fast, multi-technique XPath injection scanner written in Nim. It focuses on practical detection, response comparison, visible extraction, blind extraction.

Remote-for-Windows-2024.15-RCE. Remote for Windows 2024.15 - RCE Exploit

Remote-for-Windows-2024.15-Unauthenticated-Desktop-Screenshot-Capture-Exploit. Remote for Windows version 2024.15 suffers from a missing authentication vulnerability that allows for the disclosure of desktop screenshots.

Kuara. Kuara is a C++ webshell designed specifically for Windows systems, allowing for web-accessible command execution.

hannibal. bypass av reverse shell in windows

SofaWiki-3.9.2-Shell-Upload-open-tickets. Python

Mago. Mago is a JavaFX-based shell generator tool that creates payloads for Linux, Windows systems and web. It features a simple GUI for easy configuration and supports Base64 and URL encoding.

panzer. Panzer ProxyFinder is a command-line tool designed to quickly and easily find public proxies. By searching multiple websites, it can quickly and efficiently compile a list of working proxies that can be used for a variety of purposes, such as web scraping, penetration testing, or anonymity.

Flora. Flora is a lightweight command-line tool for discovering subdomains and takeover vulnerabilities.

nim-winrm. Native WinRM client library for Nim