Pinned Loading

1. SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Public

   Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL h…

   C# 83 8

2. CVE-2022-22845-Exploit CVE-2022-22845-Exploit Public

   Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

   Python 2 1

3. BesoToken BesoToken Public

   A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

   C++ 91 15

4. WTSImpersonator WTSImpersonator Public

   WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"

   PowerShell 122 16

5. Invoke-Unconstrained Invoke-Unconstrained Public

   Forked from ScorpionesLabs/Invoke-Unconstrained

   Python 2

6. C3-Reloaded C3-Reloaded Public

   An Improved of the C3 framework integrated with a built-in evasion techniques library, SSPI implementation, custom Microsoft Teams channel, any many more features.

   C++ 5 1