exploits

There are 457 repositories under exploits topic.

  • h4cker

    The-Art-of-Hacking/h4cker

    This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

    Language:Jupyter Notebook24k1k1384.5k

  • threat9/routersploit

    Exploitation Framework for Embedded Devices

    Language:Python12.8k6135212.4k

  • projectdiscovery/nuclei-templates

    Community curated list of templates for the nuclei engine to find security vulnerabilities.

    Language:JavaScript11.3k2021.9k3.1k

  • The-Z-Labs/linux-exploit-suggester

    Linux privilege escalation auditing tool

    Language:Shell6.2k124321.1k

  • cdk-team/CDK

    📦 Make security testing of K8s, Docker, and Containerd easier.

    Language:Go4.4k7446587

  • x0rz/EQGRP

    Decrypted content of eqgrp-auction-file.tar.xz

    Language:Perl4.2k390282.1k

  • ysrc/xunfeng

    巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

    Language:Python3.6k1811921.3k

  • Ascotbe/Kernelhub

    :palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

    Language:C3.2k805692

  • the-akira/Computer-Science-Resources

    Collection of resources spanning key areas of Computer Science

    2.7k843314
  • SUDO_KILLER

    TH3xACE/SUDO_KILLER

    A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

    Language:Shell2.4k4911260

  • AabyssZG/SpringBoot-Scan

    针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

    Language:Python2.1k1322171

  • anouarbensaad/vulnx

    vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

    Language:Python2k5262350

  • 1N3/Findsploit

    Find exploits in local and online databases instantly

    Language:Shell1.8k8711337

  • adysec/nuclei_poc

    Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有19w+POC，已校验格式的有效性并去重（验证的是格式的有效性）

    Language:Python1.7k21911504

  • XiphosResearch/exploits

    Miscellaneous exploit code

    Language:Python1.6k13713584
  • openclarity

    openclarity/openclarity

    OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure

    Language:Go1.4k28235170
  • deepce

    stealthcopter/deepce

    Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

    Language:Shell1.4k1327114

  • jxy-s/herpaderping

    Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

    Language:C++1.2k336221

  • topscoder/nuclei-wordfence-cve

    60k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

    Language:Python1.1k1926146

  • nccgroup/featherduster

    An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

    Language:Python1.1k5365130

  • dark-lbp/isf

    ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

    Language:Python1.1k6212297

  • rastating/wordpress-exploit-framework

    A Ruby framework designed to aid in the penetration testing of WordPress systems.

    Language:Ruby1k5724263

  • rfunix/Pompem

    Find exploit tool

    Language:Python1k6719269

  • 1N3/PrivEsc

    A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

    Language:C976511316

  • toolswatch/vFeed

    The Correlated CVE Vulnerability And Threat Intelligence Database API

    Language:Python94411270242

  • sundaysec/Android-Exploits

    A collection of android Exploits and Hacks

    Language:HTML932563151

  • tenable/routeros

    RouterOS Security Research Tooling and Proof of Concepts

    Language:C++8931110387

  • pedrib/PoC

    Advisories, proof of concept files and exploits that have been made public by @pedrib.

    Language:Ruby848468173

  • googleprojectzero/0days-in-the-wild

    Repository for information about 0-days exploited in-the-wild.

    Language:HTML83686582
  • HiveNightmare

    GossiTheDog/HiveNightmare

    Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

    Language:C++791165166

  • hackerschoice/THC-Archive

    All releases of the security research group (a.k.a. hackers) The Hacker's Choice

    Language:HTML734534191

  • StarCrossPortal/scalpel

    scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。

    733281874

  • spencerdodd/kernelpop

    kernel privilege escalation enumeration and exploitation framework

    Language:Python6974414131

  • 0xdea/exploits

    A handy collection of my public exploits, all in one place.

    Language:C667501119

  • smallcham/sec-admin

    分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

    Language:Python617421118
  • mec

    jm33-m0/mec

    for mass exploiting

    Language:Python6093538157