- Ace - Dumping Active Directory ACEs
- RawWinRM - Using WinRM without Invoke-Command cmdlet
- HoudiPy - Weaponizing embeddable Python to load Donut project shellcodes via web-staged payloads
- GoProcessSpy - Monitoring Windows processes using golang
- GoFileSpy - Monitoring Windows files and pipes using golang
- GoPI - Process/Thread injection tool, using Golang language
- SLN2RCE - Weaponizing VS projects into RCE using SUO or prebuild event
- CVE-2024-32002 - GIT RCE
- CVE-2024-20656 - LPE VSStandardCollectorService150 service
- CVE-2023-41425 - Wonder CMS RCE (XSS)
- CVE-2023-4220 - RCE Chamilo 1.11.24
- CVE-2023-1177 - MLFlow Path Traversal