exploits

There are 150 repositories under exploits topic.

h4cker
The-Art-of-Hacking / h4cker
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
hacking penetration-testing hacking-series cybersecurity ethical-hacking hacker exploit exploits exploit-development vulnerability vulnerability-assessment vulnerability-management vulnerability-identification awesome-lists awesome-list training hackers ai artificial-intelligence ai-security
Language:Jupyter Notebook 23947
threat9 / routersploit
Exploitation Framework for Embedded Devices
bruteforce creds dictionary-attack embedded exploits infosec python router router-exploitation-framework routersploit routersploit-framework scanner security
Language:Python 12806
projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
bugbounty exploit-development exploits fingerprint hacktoberfest nuclei nuclei-checks nuclei-templates security vulnerability-detection
Language:JavaScript 11297
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
applicable-exploits exploits hacking-tool kernel-exploitation linux-exploits linux-kernel privilege-escalation-exploits published-exploits security-tools
Language:Shell 6239
cdk-team / CDK
📦 Make security testing of K8s, Docker, and Containerd easier.
penetration penetration-testing-tools kubernetes docker hacktools k8s-penetration-toolkit k8s linux exploits cloud-native blackhat hitb cloud-native-security container container-escape container-security kernel-exploitation kubernetes-security privilege-escalation vulnerabilities
Language:Go 4444
x0rz / EQGRP
Decrypted content of eqgrp-auction-file.tar.xz
equationgroup exploits hacking nsa shadowbrokers tao
Language:Perl 4179
ysrc / xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
security pentesting infosec exploits security-audit vulnerability-detection scanner vulnerability-assessment vulnerability-scanners
Language:Python 3586
Ascotbe / Kernelhub
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
cve cve-2021-26868 cve-2021-33739 cve-2021-34486 cve-2021-36934 cve-2021-40444 cve-2021-40449 cve-2021-42278 cve-2021-42287 cve-2022-21882 cve-2022-26937 cve-2022-30206 cve-2022-33679 cve-2022-34718 exploits kernel linux pentest tool windows
Language:C 3173
the-akira / Computer-Science-Resources
Collection of resources spanning key areas of Computer Science
artificial-intelligence assembly awesome-list cloud-computing computer computervision cryptography cybersecurity database exploits javascript machine-learning mathematics networking operating-system physics programming-language python quantum-computing regular-expression
2689
SUDO_KILLER
TH3xACE / SUDO_KILLER
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
sudo-exploitation abuse-sudo ctf exploits cve pentest pentest-tool privilege-escalation sudo linux-exploits misconfiguration oscp oscp-tools oscp-journey oscp-prep
Language:Shell 2389
AabyssZG / SpringBoot-Scan
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
cve-2018-1273 cve-2021-21234 cve-2022-22947 cve-2022-22963 cve-2022-22965 cve-2024-37084 cve-2025-41243 exploit exploits security security-tools spring spring-boot spring-vulnerability springboot vul
Language:Python 2126
anouarbensaad / vulnx
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
auto-exploiter bot cloudflare-detection cms-detector crawler detects-vulnerabilities dorks exploits hacking information-gathering pentest security-tools shell-injection subdomains-gathering vulnerability vulnerability-assessment vulnerability-detection vulnerability-exploit website-vulnerability-scanner wp-scanner
Language:Python 1996
1N3 / Findsploit
Find exploits in local and online databases instantly
exploits metasploit nmap pentest hackers exploitdb find search bugbounty
Language:Shell 1778
adysec / nuclei_poc
Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有19w+POC，已校验格式的有效性并去重（验证的是格式的有效性）
daily exploit exploits fingerprint hack-tools hacker hacking nuclei nuclei-templates poc scanner security security-scanner
Language:Python 1678
XiphosResearch / exploits
Miscellaneous exploit code
exploits python poc rce php security hacking windows bypass tr-064
Language:Python 1564
openclarity
openclarity / openclarity
OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure
cloud exploits kubernetes leaked-secrets malware rootkits sbom scanner security supply-chain virtual-machine vulnerabilities
Language:Go 1432
deepce
stealthcopter / deepce
Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)
deepce docker-enumeration enumeration exploits container-escape privilege-escalation privilege-escalation-exploits
Language:Shell 1403
jxy-s / herpaderping
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.
exploit windows security process-herpaderping vulnerability security-vulnerability exploitation exploits exploit-development exploit-framework windows-10 windows-7 windows-defender antivirus antivirus-evasion process-migration process-hollowing process-doppelganging
Language:C++ 1167
topscoder / nuclei-wordfence-cve
60k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
cve nuclei nuclei-templates wordfence bugbounty exploits projectdiscovery security wordpress pentesting scanner vulnerability vulnerability-scanning awesome-list cybersecurity ethical-hacking hacker vulnerability-management nuclei-scan
Language:Python 1136
nccgroup / featherduster
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
cryptanalysis crypto cryptography encryption exploit exploitation exploitation-framework exploits python security
Language:Python 1114
dark-lbp / isf
ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python
ics ics-exp ics-poc scapy isf modbus exploits scada plc
Language:Python 1081
rastating / wordpress-exploit-framework
A Ruby framework designed to aid in the penetration testing of WordPress systems.
wordpress-exploit-framework security security-audit exploits wordpress
Language:Ruby 1036
rfunix / Pompem
Find exploit tool
exploit-database python pentest-tool exploits security-tools
Language:Python 1019
1N3 / PrivEsc
A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.
bugbounty exploits hacking linux mysql pentesting privesc sql windows
Language:C 976
toolswatch / vFeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
cve oval threat-intelligence-database python vfeed cwe capec scap vulnerability-databases vulnerability-detection vulnerability-database-entry vulnerability-identification threat intelligence-gathering exploits vulnerability vulnerability-scanners common-vulnerability-exposure threat-intelligence threatintel
Language:Python 944
sundaysec / Android-Exploits
A collection of android Exploits and Hacks
android android-architecture hacking exploit exploits dos
Language:HTML 932
tenable / routeros
RouterOS Security Research Tooling and Proof of Concepts
bughunting exploits honeypot poc routeros scanner
Language:C++ 893
pedrib / PoC
Advisories, proof of concept files and exploits that have been made public by @pedrib.
vulnerabilities exploits metasploit hacking advisories
Language:Ruby 849
googleprojectzero / 0days-in-the-wild
Repository for information about 0-days exploited in-the-wild.
0day exploits vulnerabilities
Language:HTML 831
HiveNightmare
GossiTheDog / HiveNightmare
Exploit allowing you to read registry hives as non-admin on Windows 10 and 11
security cybersecurity exploits
Language:C++ 776
hackerschoice / THC-Archive
All releases of the security research group (a.k.a. hackers) The Hacker's Choice
exploit exploits hack hacker-choice hacking hacking-tool hacking-tools hacks hpa hpav ipv6 magazine penetration-testing pentest pentest-tool pentesting pentesting-networks phreaking thc thc-hydra
Language:HTML 734
StarCrossPortal / scalpel
scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构的变异。变异完成之后，将树结构还原为原始的数据格式。
cve exploits poc vulnerabilities vulnerability fuzzing scanner
734
spencerdodd / kernelpop
kernel privilege escalation enumeration and exploitation framework
enumeration kernel exploits vulnerabilities security tools
Language:Python 697
0xdea / exploits
A handy collection of my public exploits, all in one place.
exploits buffer-overflow solaris linux aix mysql openbsd oracle zyxel
Language:C 669
smallcham / sec-admin
分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)
security scanner vulnerability-scanners infosec exploits security-audit python
Language:Python 614
mec
jm33-m0 / mec
for mass exploiting
hacking-tool rce weblogic google-search baidu-search zoomeye masscan parallelization exploits python adapted-exploits linux censys ssh-bruteforce prompt-toolkit mec
Language:Python 608