344 Open source projects that are alternatives of or similar to BoomER

Exploiting challenges in Linux and Windows

ARM rop chain gadget searcher

Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".

A Network Enumeration and Attack Toolset for Windows Active Directory Environments.

Proof of concept code for the Spectre CPU exploit.

rsGen is a Reverse Shell Payload Generator for hacking.

Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

A command-line tool for exploiting stack-based buffer overflow vulnerabilities.

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

Windows Exploit Suggester - Next Generation

Linux local root exploit for CVE-2014-0038

Tool to help exploit XXE vulnerabilities

🛠️ Tool to bypass my school's security system to get sudo privileges on MacOS

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner

GitLab CE/EE Preauth RCE using ExifTool

NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell

Purelove is a lightweight penetration testing framework, in order to better security testers testing holes with use.

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily. It is written in HTML + Javascript + PHP and released under GPLv3.

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

free exploit framework written use python language version 3.3

Encrypted exploit delivery for the masses

DoS PoC's for SAP products

A Tool that Finds, Enumerates, and Exploits Reolink Cameras.

Exploit Code for CVE-2020-1472 aka Zerologon

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.

python3批量poc检测工具

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

Wordpress 🔥 Joomla 🔥 Drupal 🔥 OsCommerce 🔥 Prestashop 🔥 Opencart 🔥

Hack The Printer

share some useful archives about vm and qemu escape exploit.

PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.73

radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability

The Lost Nintendo DS Television Output, brought back to life

Brahma - Privilege elevation exploit for Nintendo 3DS

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam

CTF竞赛权威指南

Drupal < 7.58 - Drupalgeddon 3 Authenticated Remote Code Execution (Metasploit)

Its a framework filled with alot of options and hacking tools you use directly in the script from brute forcing to payload making im still adding more stuff i now have another tool out called htkl-lite its hackers-tool-kit just not as big and messy to see updates check on my instagram @tuf_unkn0wn or if there are any problems message me on instagram

AliGuard PHP WAF

Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities

Hourly updated database of exploit and exploitation reports

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.

Exploit Netwave and GoAhead IP Camera

Metasploit framework with steroids

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.

Mouse Framework is an iOS and macOS post-exploitation framework that gives you a command line session with extra functionality between you and a target machine using only a simple Mouse payload. Mouse gives you the power and convenience of uploading and downloading files, tab completion, taking pictures, location tracking, shell command execution, escalating privileges, password retrieval, and much more.

Proof of concept of VMSA-2017-0012

AMWScan (PHP Antimalware Scanner) is a free tool to scan php files and analyze your project to find any malicious code inside it.

Extraction of iMessage Data via XSS

Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others http://ids.cs.columbia.edu/sites/default/files/ccs07poly.pdf :) If I ever port this to 64 or implement a few other suggestions (sorry I lost ppc code version contributed) it will be orders of magnitude more difficult to spot, so I h…

Exploit PollDaddy polls

Red-team tool to hook libc read syscall with a buffer overflow vulnerability.

Webshell Jumping Edition