Exploits Open Source Projects

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

Exploitation Framework for Embedded Devices

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Linux privilege escalation auditing tool

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

📦 Make security testing of K8s, Docker, and Containerd easier.

Collection of the cheat sheets useful for pentesting

Decrypted content of eqgrp-auction-file.tar.xz

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

Collection of resources spanning key areas of Computer Science

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

Next-Generation Linux Kernel Exploit Suggester

Corelan Repository for mona.py

Next Generation Custom Firmware for the PSP and Vita's ePSP.

Find exploits in local and online databases instantly

Pwn stuff.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Command line utility for searching and downloading exploits

Resources related to GitHub Security Lab

My proof-of-concept exploits for the Linux kernel

Miscellaneous exploit code

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

A collection of links related to VMware escape exploits

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

PowerShell framework to assess Azure security

75k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

A helpful Java Deserialization exploit framework.

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

A tool for embedding XXE/XML exploits into different filetypes

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

WebMap-Nmap Web Dashboard and Reporting

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

A Ruby framework designed to aid in the penetration testing of WordPress systems.

Explore RootSec's DDOS Archive, featuring top-tier scanners, powerful botnets (Mirai & QBot) and other variants, high-impact exploits, advanced methods, and efficient sniffers. Ideal for cybersecurity professionals and researchers.

Repository for information about 0-days exploited in-the-wild.

Find exploit tool

A Course on Intermediate Level Linux Exploitation

A collection of android Exploits and Hacks

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

The Correlated CVE Vulnerability And Threat Intelligence Database API

中国蚁剑后渗透框架

RouterOS Security Research Tooling and Proof of Concepts

Advisories, proof of concept files and exploits that have been made public by @pedrib.

Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

Various kernel exploits

2018-2020青年安全圈-活跃技术博主/博客

AMWScan (PHP Antimalware Scanner) is a free tool to scan php files and analyze your project to find any malicious code inside it.

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.

scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。

kernel privilege escalation enumeration and exploitation framework

A handy collection of my public exploits, all in one place.

An archive of everything related to OSCP

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.