Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others http://ids.cs.columbia.edu/sites/default/files/ccs07poly.pdf :) If I ever port this to 64 or implement a few other suggestions (sorry I lost ppc code version contributed) it will be orders of magnitude more difficult to spot, so I h…

✭ 69

c assembly Makefile exploit polymorphic penetration-testing

phpwaf-phanalyzer

AliGuard PHP WAF

✭ 12

CSS javascript PHP exploit turkish waf international defense

PollDaddyHack

Exploit PollDaddy polls

✭ 33

python exploit vote poll

dirtycow

radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability

✭ 93

c shell Makefile C++android security exploit cve dirtycow

xss-http-injector

XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily. It is written in HTML + Javascript + PHP and released under GPLv3.

✭ 22

PHP exploit toolkit sandbox xss hooker

docker-metasploit

Metasploit framework with steroids

✭ 49

Dockerfile shell docker framework exploit container metasploit

readhook

Red-team tool to hook libc read syscall with a buffer overflow vulnerability.

HTP

Hack The Printer

✭ 31

shell printer exploit pentesting htp

CVE-2021-22205

GitLab CE/EE Preauth RCE using ExifTool

✭ 165

python security gitlab exploit pentest-scripts cve-2021-22205 preauth-rce

minecraft-log4j-honeypot

Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam

✭ 89

go Dockerfile minecraft exploit log4j cve

overflow

A command-line tool for exploiting stack-based buffer overflow vulnerabilities.

✭ 66

go Makefile automation exploit command-line buffer overflow vulnerability oscp

break-fast-serial

A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs

✭ 53

python security serialization exploit tool vulnerability

SAP vulnerabilities

DoS PoC's for SAP products

✭ 47

python go ABAP exploit sap overflow hacking rce vulnerability denial-of-service hana buffer-overflow

vmware guest auth bypass

Proof of concept of VMSA-2017-0012

✭ 42

python exploit vmware vmware-esxi vulnerability vix

shu-shell

Webshell Jumping Edition

✭ 23

PHP exploit symlink file-manager webshell

Ghost

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

getroot

🛠️ Tool to bypass my school's security system to get sudo privileges on MacOS

✭ 34

shell security exploit sudo root bypass

CVE-2018-2380

PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM

✭ 55

python exploit sap cve-2018-2380

rsGen

rsGen is a Reverse Shell Payload Generator for hacking.

✭ 71

reverse-shell exploit vulnerability pentesting tcp-tunnel pentesting-tools reverse-shell-generator hack-tool anonymous-reverse-shell red-team-tools

Brahma

Brahma - Privilege elevation exploit for Nintendo 3DS

✭ 34

development exploit armv7 nintendo-3ds nintendo-hacking privilege-escalation privilege-escalation-exploits

purelove

Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.

✭ 52

python exploit frame payload purelove penetration-test-framework shllcode

Drupalgeddon3

Drupal < 7.58 - Drupalgeddon 3 Authenticated Remote Code Execution (Metasploit)

✭ 18

ruby drupal exploit metasploit exploit-db drupalgeddon2 drupalgeddon3

armroper

ARM rop chain gadget searcher

✭ 36

python arm exploit gadget pwnable

inthewilddb

Hourly updated database of exploit and exploitation reports

✭ 127

python Dockerfile exploit hacking pentesting vulnerabilities cve exploitation vulnerability-management vulnerability-scanners blueteam security-tools cve-poc

pysploit-framework

free exploit framework written use python language version 3.3

✭ 33

python open-source framework exploit hacking wiki-page free gplv2 bs4 python33 python-language linux-distros pysploit-framework

IAT API

Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.

✭ 63

assembly python exploit malware antivirus bypass

dheater

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

tryhackme-ctf

TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.

reosploit

A Tool that Finds, Enumerates, and Exploits Reolink Cameras.

✭ 89

python forthebadge security camera exploit tool ip-camera hacking cybersecurity enumeration exploits photo exploitation hacking-tool enumerates reolink reolink-api ip-cameras reolink-client

cve-2016-1764

Extraction of iMessage Data via XSS

✭ 52

javascript python security exploit xss vulnerability imessage cve

ManageEngineFileUploadExploit

POC script for the ManageEngine Multiple Products Authenticated File Upload Exploit

✭ 14

ruby exploit manageengine

301-343 of 343 exploit projects

first

‹