Collection of things made during my preparation to take on OSCE

AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. It is our hope that this tool will be useful to red teams over the short term, while over the long term help AV/EDR vendors improve how they handle AHK scripts.

Collection of things made during my preparation to take on OSEE

Security Research

Real world and CTFs exploiting web/binary POCs.

A collection of my quick and dirty scripts for vulnerability POC and detections

Example files to experience basic exploit techniques.

Alphanumeric Shellcode (x86) Encoder

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

when i started web application security testing, i fall in love with web shell development and designed some PHP based web shells. This repository contains all my codes which i released in public.

Challenges and vulnerabilities exploitation.

Exploits developed by Mikael Kall

I'll post my custom shellcode I make here!

Proof of Concept code for CVE-2015-0345 (APSB15-07)

Vulnserver exploits

Getting Envisioncollision to actually work.

A simple script for rooted Android devices to catch Snaps.

Exploits for various CVEs

Exploit-db (is NOT the official APP).

Exploit codes for rconfig <= 3.9.4

Online Marriage Registration System (OMRS) 1.0 - Remote code execution

BananaCannon is a series of exploit proof of concepts for MonkeyType.com, a popular typing test web application with a growing community. This repository contains XSS exploits and a python PoC to spoof leaderboard scores

A Node-based Exploitalert API

Roblox exploit. Only Lua C

A meticulous scrutiny of the Exploit PDFs innards exposes a network of malevolence, unveiling both the nefarious hyperlink and the URL that precipitates

experimenting with vulnerability research for CVEs

:busts_in_silhouette: Ruby script to uncloak users' virtual hosts on the FreeNode IRC network

VBulletin Remote Code Execution Exploit

🛠️ Exploit Development: This repository is a curated collection of low-level exploit examples and shellcode execution techniques. It is designed for cybersecurity researchers, reverse engineers, and students interested in understanding how raw shellcode is constructed, injected, and executed in real environments.

Microsoft Windows HTA (HTML Application) - Pinnacle of Remote Code Execution