547 Open source projects that are alternatives of or similar to Cve 2020 15906

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

Hourly updated database of exploit and exploitation reports

A general purpose memory allocator that implements an isolation security strategy to mitigate memory safety issues while maintaining good performance

Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam

An IDA Pro plugin to examine the glibc heap, focused on exploit development

Exploiting Edge's read:// urlhandler

A social experiment

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Extraction of iMessage Data via XSS

Python Powered Repository

Collection of bash scripts I wrote to make my life easier or test myself that you may find useful.

🌸 Interactive shellcoding environment to easily craft shellcodes

log4j2 remote code execution or IP leakage exploit (with examples)

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Exploitation and Mitigation Slides

Vulnerability Labs for security analysis

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.

Bash script purposed for system enumeration, vulnerability identification and privilege escalation.

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.

Basic tool to automate backdooring PE files

CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

AndroRAT | Remote Administrator Tool for Android OS Hacking

Some of my public exploits

block game military grade radar

Advanced Web Browser Fingerprinting

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能

📚 VoidHack CTF write-ups

RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1

Extensible framework for analyzing publicly available information about vulnerabilities

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

Tool to help exploit XXE vulnerabilities

Research on Anti-malware and other related security solutions

A Tool that Finds, Enumerates, and Exploits Reolink Cameras.

Automated Mass Exploiter

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

Exploiting challenges in Linux and Windows

Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds

radare2 IO plugin for Linux and Android. Modifies files owned by other users via dirtycow Copy-On-Write cache vulnerability

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

CVE-2018-8120 Windows LPE exploit

Remote exploitation framework written in Python

Self contained htaccess shells and attacks

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

PegaSwitch is an exploit toolkit for the Nintendo Switch

A collection where my current and future writeups for exploits/CTF will go

UNIX-like reverse engineering framework and command-line toolset.

Discover duplication glitches, abusive staff giving items, x-ray or simply poor server economy.

Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 14 vulnerability techniques)

OWASP Joomla Vulnerability Scanner Project