screenconnect

ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!

An unofficial Python implementation of the ScreenConnect API

Set of functions to perform various tasks in the capacity of examining the online relationship between the ScreenConnect host and client

A collection of scripts I've written to make managing an educational, primarily Windows, infrastructure easier via PowerShell.

Installs and configures ConnectWise ScreenConnect.

Download the ScreenConnect client from a custom page or when your SC server isn't internet facing.

ScreenConnect.ClientSetup.sh Patch, resolves errors like InstallPackageFile

Victim-side teardown of a search-poisoning incident: DLL sideloading via a renamed Microsoft binary, ScreenConnect abuse, and an attacker's unexecuted mining plan recovered from a Defender exclusion list.

Next.js single-page web app that provides a simple and easy way to create ScreenConnect Session Group queries by choosing a property from a dropdown list and providing a list of matching data (device names, serial numbers, IP Addresses, etc.)

docker image for screenconnect (connectwise control)

Transparently runs the unmodified ScreenConnect Linux client on Wayland/GNOME — a Java javaagent + Python daemon that reroutes AWT Robot onto PipeWire ScreenCast and Mutter RemoteDesktop.

Silent fleet diagnostics through the ScreenConnect REST API, driven by AI agent skills

ConnectWise ScreenConnect

ScreenConnect Access agent silent installation guide — one-click / near-zero popup Windows 10/11 setup. Educational kit. Contact via Telegram.

Reverse engineering, infrastructure analysis, and detection content for the ShinySp1d3r ransomware family and an associated rogue ScreenConnect / MeshCentral estate. 63 findings, 9 YARA, 36 Sigma, 18 KQL. Attribution: Scattered Spider / SLSH (Likely, low confidence). ICD-203 throughout. (287)

Portable Windows utility that audits and removes unwanted browser notification permissions across Chromium-based browsers and Firefox.