ll104567

vulnyx

VulNyx is a free platform for hackers where you can learn & practice cybersecurity with our vulnerable virtual machines.

ums2net

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

CVE-2022-1292

CVE-2022-1292 OpenSSL c_rehash Vulnerability - POC

hashes

Magic hashes – PHP hash "collisions"

Wordpress-webshell-plugin

A webshell plugin and interactive shell for pentesting a WordPress website.

ZenPhotoCMSv1.5.7-RCE

CVE-2023-4911

PoC for CVE-2023-4911

cve-2023-5966

Online-Admission-System

Online Admission System

EJS-Exploit

Remote Code Execution EJS Web Applications using express-fileupload

linux-exploit-suggester

Linux privilege escalation auditing tool

as_bypass_php_disable_functions

antsword bypass PHP disable_functions

CVE-2021-22204-exiftool

Python exploit for the CVE-2021-22204 vulnerability in Exiftool

exploits

Pwn stuff.

impacket

Impacket is a collection of Python classes for working with network protocols.

Win7Blue

Scan/Exploit - EternalBlue MS17-010 - Windows 7 32/64 Bits

GodPotato

Puff-Pastry

Stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

GoldenEye

GoldenEye Layer 7 (KeepAlive+NoCache) DoS Test Tool

erl-matter

Erlang distribution weaknesses and tooling

debugfs

魔改debugfs，应急溯源版本

erlang-otp-rce

Python script to execute commands via Erlang/OTP Distribution Protocol

Chankro

Herramienta para evadir disable_functions y open_basedir

OpenEMR-5.0.1.3-Authentication-Bypass-Time-Based-SQLi-Exploit

Exploit that combines two known vulnerabilities in OpenEMR 5.0.1.3 to extract the admin account hash

CTFEnum

CTF enumeration tool. It facilitates the Network Pentest

blog

cheat.sh

the only cheat sheet you need

Writeups

Ctf writeups