0day

There are 69 repositories under 0day topic.

K8tools
k8gege / K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
exploit apt 0day poc getshell pentest hacking scanner privilege-escalation bypass crack netscan brute-force password database
Language:PowerShell 5648
GhostTroops / scan4all
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
attack auto golang hacker tools nuclei bugbounty bugbounty-tools hacktools pentest-tool 0day brute-force nmap ssh vulnerabilities-scan recon security-scanner security-tools vulnerability-detection vulnerability-scanners
Language:Go 5277
PeiQi0 / PeiQi-WIKI-Book
面向网络安全从业者的知识文库🍃
cve 1day 0day vuln redteam peiqi-wiki
3507
veo / vscan
开源、轻量、快速、跨平台的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)
portscan fingerprint brute security redteam fuzzing 0day
Language:Go 1364
W01fh4cker / Serein
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。
gui batch 0day cve-2022-26134 cve-2022-22980 cve-2022-29464 cve-2022-22954 cve-2022-25078 cve-2022-8515 cve-2018-13379 cve-2019-5418 cve-2021-34473 cve-2021-43734 cve-2022-23337 cve-2022-29303 cve-2021-30461 cve-2022-30525 cve-2022-1119 cve-2022-33891
Language:Python 1132
OWASP / joomscan
OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/
owasp joomla joomla-cms joomscan vunerability scanner vulnerability-scanners exploit 0day
Language:Raku 1020
hacktoolspack / hack-tools
hack tools
0day 2020 exploit hack hacking hacking-tool hacks injection java javascript perl python sqlinjection tools vulnerability vulnerability-databases vulnerability-scanners vulnerability-web zeroday
Language:Python 989
klezVirus / CVE-2021-40444
CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
cve-2021-40444 msword office 0day rce remote-code-execution
Language:HTML 784
b1tg / CVE-2023-38831-winrar-exploit
CVE-2023-38831 winrar exploit generator
0day exploit cve
Language:Python 769
googleprojectzero / 0days-in-the-wild
Repository for information about 0-days exploited in-the-wild.
exploits vulnerabilities 0day
Language:HTML 716
Cr4sh / ThinkPwn
Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors
0day exploit firmware intel smm uefi vulnerability
Language:C 655
jas502n / 0day-security-software-vulnerability-analysis-technology
0day安全_软件漏洞分析技术
hack 0day security software binary vulnerability
Language:C 602
Ostorlab / KEV
Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
0day cisa cisa-kev exploits vulnerability
490
1N3 / Wordpress-XMLRPC-Brute-Force-Exploit
Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
0day exploit poc wordpress wordpress-xmlrpc xml-rpc
Language:Python 439
illusionofchaos / ios-gamed-0day
iOS gamed exploit (fixed in 15.0.2)
ios swift 0day ios15
Language:Objective-C 439
Bo0oM / PHP_imap_open_exploit
Bypassing disabled exec functions in PHP (c) CRLF
0day exploit php bypass imap
Language:PHP 400
hktalent / spring-spel-0day-poc
spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963
rce poc 0day exp spring spring-cloud-function java spel cve-2022-22963
354
ZeroMemoryEx / APT38-0day-Stealer
APT38 Tactic PoC for Stealing 0days from security professionals
win32api rce malware visual-studio lazarus malware-research red-team 0day 0day-stealer apt-38 north-korean-apt lateral-movement
Language:C++ 256
VoidSec / Exploit-Development
Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)
exploit poc windows shellcode rop-exploitation rop rop-gadgets rop-chain aslr aslr-bypass lpe eop rce 0day kernel
Language:Python 204
1N3 / Exploits
Exploits by 1N3 @CrowdShield @xer0dayz @XeroSecurity
0day 1n3 bug-bounties crowdshield ctf cve exploits poc
Language:Python 194
W01fh4cker / CVE-2023-46747-RCE
exploit for f5-big-ip RCE cve-2023-46747
0day cve-2023-46747 exploit f5 redteam
Language:Python 188
no-sandbox
sickcodes / no-sandbox
No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox. TL;DR exploits in these browser based applications are already sandboxed escaped: https://no-sandbox.io/
chrome chromium exploit rce 0day research bugbounty bug
177
illusionofchaos / ios-analyticsd-pre14.7-exploit
iOS exploit (fixed in 14.7)
ios swift 0day
Language:Swift 175
illusionofchaos / ios-nehelper-wifi-info-0day
iOS 15 0-day exploit (still works in 15.0.2)
ios swift 0day ios15
Language:Swift 171
illusionofchaos / ios-nehelper-enum-apps-0day
iOS 15 0-day exploit (still works in 15.0.2)
ios swift 0day ios15
Language:Swift 167
k8gege / CiscoExploit
Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
cisco exploit poc exp getshell rce 0day
Language:Python 130
p0wershe11 / ProxyLogon
ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)
proxylogon cve-2021-26855 cve-2021-26855-ssrf cve-2021-27065 exploit microsoft-exchange microsoft-exchange-proxylogon microsoft-exchange-server 0day zeroday
Language:Python 120
W01fh4cker / CVE-2024-27198-RCE
CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4
jetbrains redteam teamcity cve-2024-27198 cve-2024-27199 0day auth exploit rce
Language:Python 119
tweedge / springcore-0day-en
Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.
spring4shell springcore java deserialization-vulnerability exploit 0day
Language:Python 104
V-i-x-x / AMSI-BYPASS
"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS
0day amsi-bypass amsi-evasion amsi-patch av avbypass edr-bypass pentest pentesting vulnerability
Language:PowerShell 99
DrunkenShells / Disclosures
Public Disclosures
cve cves 0day 0-day security
Language:HTML 88
k8gege / ZimbraExploit
Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
zimbra xxe rce ssrf upload getshell exploit cve-2019-9621 poc 0day k8cscan
Language:Ruby 74
zadewg / LIVEBOX-0DAY
CVE-2018-20377; 20575; 20576; 20577 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.
0day csrf privacy router
Language:HTML 74
jas502n / Ubuntu-0day
all 4.4 ubuntu aws instances are vulnerable
0day ubuntu hack tools root
Language:C 66
Cr4sh / Aptiocalypsis
Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares
0day ami exploit firmware intel smm uefi vulnerability
Language:Python 58
PPT
k8gege / PPT
PPT教程
pentest hacking security exploit 0day ppt k8tool
57

0day

k8gege / K8tools

GhostTroops / scan4all

PeiQi0 / PeiQi-WIKI-Book

veo / vscan

W01fh4cker / Serein

OWASP / joomscan

hacktoolspack / hack-tools

klezVirus / CVE-2021-40444

b1tg / CVE-2023-38831-winrar-exploit

googleprojectzero / 0days-in-the-wild

Cr4sh / ThinkPwn

jas502n / 0day-security-software-vulnerability-analysis-technology

Ostorlab / KEV

1N3 / Wordpress-XMLRPC-Brute-Force-Exploit

illusionofchaos / ios-gamed-0day

Bo0oM / PHP_imap_open_exploit

hktalent / spring-spel-0day-poc

ZeroMemoryEx / APT38-0day-Stealer

VoidSec / Exploit-Development

1N3 / Exploits

W01fh4cker / CVE-2023-46747-RCE

sickcodes / no-sandbox

illusionofchaos / ios-analyticsd-pre14.7-exploit

illusionofchaos / ios-nehelper-wifi-info-0day

illusionofchaos / ios-nehelper-enum-apps-0day

k8gege / CiscoExploit

p0wershe11 / ProxyLogon

W01fh4cker / CVE-2024-27198-RCE

tweedge / springcore-0day-en

V-i-x-x / AMSI-BYPASS

DrunkenShells / Disclosures

k8gege / ZimbraExploit

zadewg / LIVEBOX-0DAY

jas502n / Ubuntu-0day

Cr4sh / Aptiocalypsis

k8gege / PPT