nullsploit is a work in progress exploitation framework. Currently, only a couple number of exploits are included in the framework, however the bases are being built to allow for rapid exploit development.

Features currently available included defining what payloads (shellcode) to use with the exploit, a custom encoder to avoid bad characters within the payload as well as an exploit shell handler.

A short demo of the WorldMail IMAP exploitation module is included below:

The project is available on github at the following link:

Leave a Reply

Your email address will not be published. Required fields are marked *