Top 343 exploit open source projects

Vulnerability Labs for security analysis

✭ 1,002

python security exploit vulnerability cve

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

✭ 992

python hack android hacking exploit kali-linux adb backdoor rat post-exploitation exploitation-framework

Powerladon

Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC

✭ 39

powershell security hacking exploit pentest pentest-tool poc subdomain-scanner

Cve 2020 15906

Writeup of CVE-2020-15906

✭ 39

python exploit exploitation cve

Pysploit

Remote exploitation framework written in Python

✭ 37

python linux security exploit exploitation remote payload

Prestashop Cve 2018 19126

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

✭ 37

exploit web-security

Exploit Cve 2016 9920

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

✭ 34

python docker exploit rce

H Encore

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68

✭ 968

c hack kernel exploit jailbreak rop

Tegrarcmgui

C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)

✭ 965

hack gui exploit switch payload nintendo-switch

Cve 2017 0065

Exploiting Edge's read:// urlhandler

✭ 15

html security exploit vulnerability edge cve

Featherduster

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

✭ 876

python security cryptography encryption crypto exploit exploitation exploits exploitation-framework

Phonesploit

Using open Adb ports we can exploit a Andriod Device

✭ 854

python hack hacking exploit apk adb andriod

V3n0m Scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

✭ 847

python python3 hacking pentesting dns asyncio scanner exploit vulnerability cloudflare xss vulnerability-scanners ftp aiohttp metasploit sqli

Pwn jenkins

Notes about attacking Jenkins servers

✭ 841

python hacking exploit pentest jenkins rce

Pegaswitch

PegaSwitch is an exploit toolkit for the Nintendo Switch

✭ 922

javascript exploit switch

Confiscate

Discover duplication glitches, abusive staff giving items, x-ray or simply poor server economy.

✭ 23

java plugin minecraft exploit spigot bukkit

Wasabi Aeg

Yet another implementation of AEG (Automated Exploit Generation) using symbolic execution engine Triton.

✭ 23

python exploit symbolic-execution

Xattacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

✭ 897

perl wordpress hacking security-tools scanner exploit pentest hacking-tool exploitation security-scanner drupal vulnerability-detection joomla vulnerability-assessment vulnerability-scanner

Shellen

🌸 Interactive shellcoding environment to easily craft shellcodes

✭ 799

python shell assembly assembler shellcode architecture exploit ctf interactive exploitation asm pwn disassembly syscalls capstone

Oscp

Collection of things made during my OSCP journey

✭ 709

python c bash exploit scripts oscp privilege-escalation

Htshells

Self contained htaccess shells and attacks

✭ 708

shell security penetration-testing exploit apache webshell polyglot

K8cscan

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

✭ 693

python security mysql hacking scanner exploit pentest password oracle poc ftp ipc mssql subdomain

Spectre Attack

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

✭ 690

c example exploit security-vulnerability spectre

Joomscan

OWASP Joomla Vulnerability Scanner Project

✭ 640

scanner exploit vulnerability-scanners owasp joomla

Penetration Testing Tools

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

✭ 614

powershell testing hacking tools penetration-testing exploit scripts cheatsheets social-engineering

Herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

✭ 614

security windows exploit windows-10 vulnerability exploitation exploits antivirus security-vulnerability antivirus-evasion

Windows Kernel Exploits

windows-kernel-exploits Windows平台提权漏洞集合

✭ 5,963

c python C++powershell ruby C#windows tool kernel exploit pentest collections

Rop Tool

A tool to help you write binary exploits

✭ 590

c arm exploit x86 x86-64 elf mips pe rop

Cve 2019 11708

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

✭ 581

javascript firefox exploit exploitation

Heap Viewer

An IDA Pro plugin to examine the glibc heap, focused on exploit development

✭ 574

python exploit exploitation ida-pro ida-plugin heap idapython

Am I Affected By Meltdown

Meltdown Exploit / Proof-of-concept / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.

✭ 549

security exploit poc

Hack Tools

hack tools

✭ 488

javascript python java perl hack hacking tools exploit hacking-tool vulnerability vulnerability-scanners injection hacks

Anticheat Testing Framework

Framework to test any Anti-Cheat

✭ 481

cplusplus windows reverse-engineering kernel exploit

Thc Archive

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

✭ 474

hack html hacking pentesting penetration-testing exploit pentest hacking-tool pentest-tool ipv6 exploits hacks

Byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

✭ 467

windows kernel exploit

Poc

Proofs-of-concept

✭ 467

rpc exploit research vulnerability poc proof-of-concept scada

Autosploit

Automated Mass Exploiter

✭ 4,500

python shell security automation security-tools exploit exploitation metasploit offsec

Drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

✭ 464

ruby exploit poc drupal

Hershell

Multiplatform reverse shell generator

✭ 456

go security exploit reverse-shell

Cve 2018 8120

CVE-2018-8120 Windows LPE exploit

✭ 447

exploit cve

Hvmi

Hypervisor Memory Introspection Core Library

✭ 438

c introspection exploit memory protection hypervisor rootkit

Cve 2017 0785

Blueborne CVE-2017-0785 Android information leak vulnerability

✭ 428

python exploit poc

Nxloader

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

✭ 417

java exploit usb nintendo nintendo-switch

Ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

✭ 4,808

java Dockerfile exploit serialization jvm vulnerability poc deserialization gadget javadeser

Cloak

Cloak can backdoor any python script with some tricks.

✭ 411

python exploit payload backdoor evasion

Deauthdetector

Detect deauthentication frames using an ESP8266

✭ 406

arduino esp8266 exploit wifi attack detector detect

Firmware slap

Discovering vulnerabilities in firmware through concolic analysis and function clustering.

✭ 407

python exploit firmware

Meltdown

This repository contains several applications, demonstrating the Meltdown bug.

✭ 3,931

c Makefile shell exploit proof-of-concept side-channel

Linux Kernel Exploits

linux-kernel-exploits Linux平台提权漏洞集合

✭ 4,203

c python shell ruby HTML Makefile linux awesome tool kernel exploit pentest collection

Kernel Exploits

Various kernel exploits

✭ 397

c linux kernel exploit linux-kernel

Kindle 5.6.5 Jailbreak

Kindle 5.6.5 exploitation tools.

✭ 393

assembly exploit jailbreak

Php imap open exploit

Bypassing disabled exec functions in PHP (c) CRLF

✭ 392

exploit imap bypass

Struts Pwn

An exploit for Apache Struts CVE-2017-5638

✭ 391

python exploit apache

Hyperpwn

A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda

✭ 387

javascript reverse-engineering exploit debugging ctf hyper gdb pwn

A Red Teamer Diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

✭ 382

script hacking security-tools pentesting tools penetration-testing exploit cybersecurity vulnerability redteam enumeration nmap active-directory metasploit privilege-escalation meterpreter

Ladongo

Ladon Pentest Scanner framework 全平台LadonGo开源内网渗透扫描器框架，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

✭ 366

go security-tools detection scanner exploit poc brute-force

Trinity

Trinity Exploit - Emulator Escape

✭ 371

c hack emulator kernel exploit jailbreak rop

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

✭ 4,173

powershell python ASP.NET go c VBScript database hacking scanner exploit pentest password poc brute-force bypass privilege-escalation apt crack 0day getshell netscan

Gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

✭ 4,197

python c linux reverse-engineering exploit debugging ctf malware-analysis ida-pro gdb pwn mips discord python-api gef binary-ninja pwntools sparc powerpc exploit-development

Exploit Cve 2016 10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

✭ 356

docker exploit

121-180 of 343 exploit projects

first

‹

›