iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

✭ 326

ios reverse-engineering scanner exploit vulnerability vulnerability-scanners

Sireprat

Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)

✭ 326

python raspberry-pi exploit raspberrypi rce

Armpwn

Repository to train/learn memory corruption on the ARM platform.

✭ 320

python exploit ctf

Wordpress Xmlrpc Brute Force Exploit

Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield

✭ 315

python wordpress exploit poc

Pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

✭ 314

macos exploit safari

Struts Pwn cve 2018 11776

An exploit for Apache Struts CVE-2018-11776

✭ 300

python exploit apache

Windows kernel resources

Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits

✭ 298

exploit

Nginx Lua Anti Ddos

A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Social Engineering Rainbow Tables Password Cracking Tools Password Lists Dictionary Attacks Time Delay Any Hosting Provider Any CMS or Custom Website Unlimited Attempt Frequency Search Attacks HTTP Basic Authentication HTTP Digest Authentication HTML Form Based Authentication Mask Attacks Rule-Based Search Attacks Combinator Attacks Botnet Attacks Unauthorized IPs IP Whitelisting Bruter THC Hydra John the Ripper Brutus Ophcrack unauthorized logins Injection Broken Authentication and Session Management Sensitive Data Exposure XML External Entities (XXE) Broken Access Control Security Misconfiguration Cross-Site Scripting (XSS) Insecure Deserialization Using Components with Known Vulnerabilities Insufficient Logging & Monitoring Drupal WordPress Joomla Flash Magento PHP Plone WHMCS Atlassian Products malicious traffic Adult video script avs KVS Kernel Video Sharing Clip Bucket Tube sites Content Management Systems Social networks scripts backends proxy proxies PHP Python Porn sites xxx adult gaming networks servers sites forums vbulletin phpbb mybb smf simple machines forum xenforo web hosting video streaming buffering ldap upstream downstream download upload rtmp vod video over dl hls dash hds mss livestream drm mp4 mp3 swf css js html php python sex m3u zip rar archive compressed mitigation code source sourcecode chan 4chan 4chan.org 8chan.net 8ch 8ch.net infinite chan 8kun 8kun.net anonymous anon tor services .onion torproject.org nginx.org nginx.com openresty.org darknet dark net deepweb deep web darkweb dark web mirror vpn reddit reddit.com adobe flash hackthissite.org dreamhack hack hacked hacking hacker hackers hackerz hackz hacks code coding script scripting scripter source leaks leaked leaking cve vulnerability great firewall china america japan russia .gov government http1 http2 http3 quic q3 litespeedtech litespeed apache torrents torrent torrenting webtorrent bittorrent bitorrent bit-torrent cyberlocker cyberlockers cyber locker cyberbunker warez keygen key generator free irc internet relay chat peer-to-peer p2p cryptocurrency crypto bitcoin miner browser xmr monero coinhive coin hive coin-hive litecoin ethereum cpu cycles popads pop-ads advert advertisement networks banner ads protect ovh blazingfast.io amazon steampowered valve store.steampowered.com steamcommunity thepiratebay lulzsec antisec xhamster pornhub porn.com pornhub.com xhamster.com xvideos xvdideos.com xnxx xnxx.com popads popcash cpm ppc

✭ 295

javascript lua html security exploit cloudflare traffic protection dos ddos

Vbscan

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

✭ 295

perl exploit vulnerability vulnerability-scanners owasp

Android Exploits

A collection of android Exploits and Hacks

✭ 290

html android hacking exploit android-architecture exploits dos

Pwn2exploit

all mine papers, pwn & exploit

✭ 289

exploit binary pwn

Traitor

⬆️ ☠️ Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, polkit, docker socket

✭ 3,473

go Makefile security-tools exploit infosec privilege-escalation privesc hackthebox gtfobins redteam-tools cve-2021-3560

Cve 2017 11882

CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.

✭ 280

python shellcode exploit

Macos Kernel Exploit

macOS Kernel Exploit for CVE-2019-8781. Credit for the bug goes to @LinusHenze :)

✭ 279

c macos exploit

Keylogger

Keylogger is 100% invisible keylogger not only for users, but also undetectable by antivirus software. Blackcat keylogger Monitors all keystokes, Mouse clicks. It has a seperate process which continues capture system screenshot and send to ftp server in given time.

✭ 271

client exploit simple system visual keylogger ftp-client

Cve 2019 1003000 Jenkins Rce Poc

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

✭ 270

javascript groovy security exploit jenkins poc cve information-security rce

Commodity Injection Signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

✭ 267

javascript html http exploit fuzzing input xss poc injection random burpsuite rce header

Webcgi Exploits

Multi-language web CGI interfaces exploits.

✭ 268

exploit

Jenkins Rce

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

✭ 262

java hacking exploit jenkins rce

Exploit Cve 2017 7494

SambaCry exploit and vulnerable container (CVE-2017-7494)

✭ 265

c linux exploit rce samba

Remot3d

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors

✭ 263

shell bash linux tools exploit malware bash-script remote trojan backdoor

Shellver

Reverse Shell Cheat Sheet TooL

✭ 258

python java ruby shell perl bash linux windows exploit metasploit reverse

Shiro exploit

Apache Shiro 反序列化漏洞检测与利用工具

✭ 252

python crypto exploit vulnerability shiro vulnerability-scanners

Defaultcreds Cheat Sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

✭ 1,949

Jupyter Notebook python pentesting pentest infosec cheatsheet bugbounty cybersecurity blueteam exploit offensive-security default-password credentials-gathering

Penetration testing poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

FlameCord

Patch for Waterfall to improve performance during attacks and fix memory issues.

✭ 103

shell python minecraft security exploit spigot bungeecord waterfall travertine 2lstudios flamecord

CVE-2018-7750

an RCE (remote command execution) approach of CVE-2018-7750

✭ 18

python exploit poc cve-2018-7750

Exploit-Development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

✭ 84

python C++ruby c windows kernel exploit poc rce rop rop-exploitation rop-gadgets aslr lpe 0day rop-chain eop aslr-bypass

Eternalblue

Eternalblue written in CSharp. Contains version detection, vulnerability scanner and exploit of MS17-010

✭ 150

C#exploit metasploit eternalblue eternalblue-scanner

xsymlink

Xbox One Symbolic Link Exploit: Access restricted/encrypted volumes using the Xbox File Explorer.

✭ 18

C#exploit symbolic-links reverse-engineering xbox vulnerability

awesome-list-of-secrets-in-environment-variables

🦄🔒 Awesome list of secrets in environment variables 🖥️

✭ 538

security exploit log4j cybersecurity poc pentesting writeups bugbounty red-team blue-team security-writeups cve-2021-44228 bugbounttips

moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

✭ 544

rust linux security exploit infosec cve exploitation privilege-escalation security-tools redteam red-teaming redteam-tools infosectools

Exploits

Real world and CTFs exploiting web/binary POCs.

✭ 69

python shell exploit vulnerability pwn scada pwned exploit-code scada-security scada-exploitation

external-protocol-flooding

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

✭ 603

typescript CSS javascript HTML Dockerfile security privacy exploit identification vulnerability fingerprinting browser-fingerprinting

Chimay-Red-tiny

This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.

✭ 25

python mikrotik exploit vulnerability wikileaks mikrotik-router chimay-red

SQL Injection Payload

SQL Injection Payload List

✭ 62

sql database exploit dbms injection vulnerability vulnerability-detection payload vulnerability-management vulnerability-scanners sql-commands sqlinjection sql-injection-attacks sql-injection-payload

All-Discord-Exploits

This is a list of Discord console scripts, bugs and exploits.

✭ 34

exploit discord discord-hack discord-exploit

om5p-ac-v2-unlocker

Open Mesh OM5P-AC v2 Unlocker (U-Boot 1.1.4 based)

✭ 32

c assembly C++Makefile Batchfile PHP exploit openwrt reverse-engineering openmesh u-boot openocd jtag

destiny-macros

A collection of Destiny 2 macros built with AutoHotKey

✭ 24

autohotkey game automation exploit wtf ahk destiny2

log4j2-rce-exploit

log4j2 remote code execution or IP leakage exploit (with examples)

✭ 62

java javascript exploit cve log4j2 log4shell

YAPS

Yet Another PHP Shell - The most complete PHP reverse shell

✭ 35

PHP backdoor reverse-shell exploit hacking netcat web-shell penetration-testing rat pentesting bugbounty pentest ctf-tools netcat-reverse pentest-tool webhacking reverse-tcp pentest-script cve-2021-4034

HackingAllTheThings

My documentation and tools for learn ethical hacking.

✭ 66

python c C#powershell C++shell security exploit hacking pentesting oscp exploit-development hacking-tools oscp-tools oscp-prep oscp-engagements

cve-2021-3449

CVE-2021-3449 OpenSSL denial-of-service exploit 👨🏻‍💻

✭ 220

go Makefile tls exploit openssl denial-of-service cve-2021-3449

Pentesting

Misc. Public Reports of Penetration Testing and Security Audits.

✭ 24

security security-audit exploit poc vulnerability infosec pentesting security-vulnerability bugbounty pentest infosec-reference infosec-guideline

MS17010EXP

Ladon Moudle MS17010 Exploit for PowerShell

✭ 40

powershell exploit hacking pentest hacking-tool exp ladon ms17010 ladon-poc

HatVenom

HatVenom is a HatSploit native powerful payload generation tool that provides support for all common platforms and architectures.

✭ 84

python c exploit binary malware executable exploits elf binary-exploitation macho pe payload payloads exe architectures shellcodes shellcode-injection entysec

CVE-2021-33766

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

✭ 37

shell microsoft exploit exchange poc vulnerability exchange-server cve-2021-33766 proxytoken

pwnscripts

Very simple script(s) to hasten binary exploit creation

✭ 66

python wrapper exploit printf pwn ctf pwntools rop rop-gadgets binary-exploitation exploitation-framework ctf-tools fsb libc-database format-string-attack return-oriented-programming

ShadowSteal

Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

✭ 186

nim python Makefile Dockerfile windows exploit exploit-development

C-Experiments

Experiments on C/C++ Exploits

✭ 19

c C++assembly python Makefile linux exploit reverse-engineering asm exploits elf cc elf64

sqlinjection-training-app

A simple PHP application to learn SQL Injection detection and exploitation techniques.

✭ 56

PHP CSS Dockerfile exploit sql-injection application-security web-security appsec vulnerable-web-app owasp-top-10 owasp-top-ten vulnerable-apps training-app

winallenum

This powershell script has got to run in remote hacked windows host, even for pivoting

✭ 13

powershell windows framework exploit tool hacking ps1 pentesting pentest powershell-script pentest-tool privesc ps1-script local-exploits

181-240 of 343 exploit projects

first

‹

›