exploit

There are 264 repositories under exploit topic.

h4cker
The-Art-of-Hacking / h4cker
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
hacking penetration-testing hacking-series cybersecurity ethical-hacking hacker exploit exploits exploit-development vulnerability vulnerability-assessment vulnerability-management vulnerability-identification awesome-lists awesome-list training hackers ai artificial-intelligence ai-security
Language:Jupyter Notebook 16738
vitalysim / Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
ctf hacking privilege-escalation reverse-engineering buffer-overflow penetration-testing owasp exploit malware windows-privilege-escalation privilege-escalation-linux mitm
14748
Gallopsled / pwntools
CTF framework and exploit development library
ctf exploit python pwntools assembly ctf-framework shellcode rop pwnable defcon capture-the-flag wargame python2 python3 linux bsd shellcoding shellcode-development hacktoberfest
Language:Python 11537
SecWiki / windows-kernel-exploits
windows-kernel-exploits Windows平台提权漏洞集合
collections exploit kernel pentest tool windows
Language:C 7841
ysoserial
frohoff / ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
java deserialization gadget exploit javadeser jvm serialization poc vulnerability
Language:Java 7348
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
awesome awesome-list hacking search-engine osint awesome-lists dns hacking-tools exploit security security-tools vulnerability wifi-network bugbounty osint-tool vulnerabilities redteam redteaming cve hacktoberfest
Language:Shell 6747
gef
hugsy / gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
python exploit gdb linux reverse-engineering ctf ida-pro binary-ninja pwn exploit-development debugging malware-analysis pwntools powerpc sparc mips discord gef python-api
Language:Python 6529
traitor
liamg / traitor
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
gtfobins exploit privesc privilege-escalation hackthebox infosec redteam-tools security-tools cve-2021-3560 dirtypipe cve-2022-0847
Language:Go 6506
Mr-xn / Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
penetration-testing poc getshell csrf penetration-testing-poc csrf-webshell cve rce sql-poc poc-exp bypass oa-getshell cve-cms php-bypass thinkphp sql-getshell authentication-bypass cobalt-strike exploit
Language:HTML 6181
trickest / cve
Gather and update all available and newest CVEs with their PoC.
poc cve cve-poc latest-cve vulnerability vulnerabilities software-vulnerabilities software-security exploit security infosec hacking pentesting penetration-testing red-team security-tools software-vulnerability
Language:HTML 6123
yaklang / yakit
Cyber Security ALL-IN-ONE Platform
redteam redteam-tools hacking-tools scanner burpsuite pentest golang blueteam exploit hacking security
Language:TypeScript 6080
nomi-sec / PoC-in-GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
security cve exploit poc vulnerability
6009
K8tools
k8gege / K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
exploit apt 0day poc getshell pentest hacking scanner privilege-escalation bypass crack netscan brute-force password database
Language:PowerShell 5648
xairy / linux-kernel-exploitation
A collection of links related to Linux kernel security and exploitation
linux-kernel kernel-exploitation exploit privilege-escalation security
5340
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
infosec default-password pentesting bugbounty pentest credentials-gathering cheatsheet cybersecurity blueteam offensive-security exploit
Language:Python 5313
SecWiki / linux-kernel-exploits
linux-kernel-exploits Linux平台提权漏洞集合
linux kernel exploit tool collection awesome pentest
Language:C 5129
NullArray / AutoSploit
Automated Mass Exploiter
automation exploit exploitation metasploit offsec python security security-tools
Language:Python 4920
Ladon
k8gege / Ladon
Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。Ladon 12.2内置262个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息，高危漏洞检测16个含MS17010、Zimbra、Exchange
scanner portscan pentest hacking security security-tools security-scanner poc getshell brute-force password netscan tools hack exp ladon ipscanner exploit
Language:PowerShell 4609
AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.
adb android android-debug-bridge cybersecurity exploit hacking metasploit-framework penetration-testing pentesting phonesploit phonesploit-pro android-hacking hacking-script hacking-tool hack meterpreter pentest-tool python hacktoberfest collaborate
Language:Python 4216
IAIK / meltdown
This repository contains several applications, demonstrating the Meltdown bug.
exploit proof-of-concept side-channel
Language:C 4098
zhzyker / exphub
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
weblogic tomcat exploit poc vulnerability exp webshell drupal getshell nexus cve-2020-10199 cve-2020-2555 cve-2020-11444 cve-2020-10204 cve-2020-1938 cve-2020-2883 cve-2020-2551 cve-2020-5902 cve-2020-14882
Language:Python 4030
bitsadmin / wesng
Windows Exploit Suggester - Next Generation
microsoft windows exploit suggester patches updates
Language:Python 3967
firmianay / CTF-All-In-One
CTF竞赛权威指南
ctf security pwn reverse-engineering web misc crypto exploit book hacking
Language:C 3798
lcvvvv / kscan
Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。
redteam scanner bruteforce brute-force pentest exploit red-team security webscan fingerprint
Language:Go 3657
scipag / vulscan
Advanced vulnerability scanning with Nmap NSE
vulnerability vulnerability-scanners vulnerability-detection vulnerability-identification vulnerability-assessment security security-audit security-scanner penetration-testing nmap nmap-scripts exploit vulnerability-scanning vulnerability-databases vulnerability-database-entry nmap-scan-script nse nsescript lua lua-script
Language:Lua 3337
Threekiii / Awesome-Redteam
一个攻防知识仓库 Red Teaming and Offensive Security
command-and-control execution exploit initial-access lateral-movement privilege-escalation reconnaissance red-teaming
Language:Python 3313
zhzyker / vulmap
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
exploit cve rce vulnerabilities cve-2016-4437 security security-tools pentesting pentest-tool cve-2020-14882 cve-2020-2555 cve-2020-2883 scanner cve-2020-13942 cve-2020-17518 cve-2021-21972 cve-2021-26855 cve-2021-27065 cve-2021-21975 cve-2021-3129
Language:Python 3280
karma9874 / AndroRAT
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
android backdoor python reverse-shell sockets interpreter androrat rat android-application exploit interpreter-commands java apk hacktoberfest android-rat
Language:Java 2726
Ghost
EntySec / Ghost
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
adb android-device android android-debug-bridge android-exploit post-exploitation exploit exploitation-framework android-hack android-hacking android-rat rat remote-access kali-linux hack hacking hacking-tools remote-shell backdoor entysec
Language:Python 2556
mgeeky / Penetration-Testing-Tools
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.
penetration-testing penetration testing tools scripts cheatsheets exploit social-engineering networks red-teaming hacking pentesting redteam security
Language:PowerShell 2438
joaomatosf / jexboss
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
exploit exploiting-vulnerabilities deserialization javadeser gadget reverse-shell
Language:Python 2365
RootMyTV.github.io
RootMyTV / RootMyTV.github.io
RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.
tv webos exploit cve-2022-23727 cve-2020-9759
Language:HTML 2101
david942j / one_gadget
The best tool for finding one gadget RCE in libc.so.6
ctf pwnable pwn glibc one-gadget-rce shell exploit gadget libc
Language:Ruby 1975
Notselwyn / CVE-2024-1086
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
cve cve-2024-1086 exploit lpe poc
Language:C 1927
helloexp / 0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
exploit
Language:C 1901
pwn_jenkins
gquere / pwn_jenkins
Notes about attacking Jenkins servers
jenkins pentest hacking exploit rce
Language:Python 1898

exploit

The-Art-of-Hacking / h4cker

vitalysim / Awesome-Hacking-Resources

Gallopsled / pwntools

SecWiki / windows-kernel-exploits

frohoff / ysoserial

edoardottt / awesome-hacker-search-engines

hugsy / gef

liamg / traitor

Mr-xn / Penetration_Testing_POC

trickest / cve

yaklang / yakit

nomi-sec / PoC-in-GitHub

k8gege / K8tools

xairy / linux-kernel-exploitation

ihebski / DefaultCreds-cheat-sheet

SecWiki / linux-kernel-exploits

NullArray / AutoSploit

k8gege / Ladon

AzeemIdrisi / PhoneSploit-Pro

IAIK / meltdown

zhzyker / exphub

bitsadmin / wesng

firmianay / CTF-All-In-One

lcvvvv / kscan

scipag / vulscan

Threekiii / Awesome-Redteam

zhzyker / vulmap

karma9874 / AndroRAT

EntySec / Ghost

mgeeky / Penetration-Testing-Tools

joaomatosf / jexboss

RootMyTV / RootMyTV.github.io

david942j / one_gadget

Notselwyn / CVE-2024-1086

helloexp / 0day

gquere / pwn_jenkins