621 Open source projects that are alternatives of or similar to Exploits

Proofs-of-concept

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

CTF竞赛权威指南

Misc. Public Reports of Penetration Testing and Security Audits.

News and publication on cybersecurity in industry

Asynchronous Python implementation of SlowLoris DoS attack

Safari local file reader

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

My exploitDB.

A command-line tool for exploiting stack-based buffer overflow vulnerabilities.

SQL Injection Payload List

hack tools

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

📚 VoidHack CTF write-ups

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

The best tool for finding one gadget RCE in libc.so.6

🔍Heap analysis tool for CTF pwn.

A collection of electronic hacker magazines carefully curated over the years from multiple sources

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

Advanced Web Browser Fingerprinting

Proof of concept of VMSA-2017-0012

🏴‍☠️ Pwn misconfigured sites running ShareX custom image uploader API through chained exploit

Guest to host VM escape exploit for Parallels Desktop

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

Very simple script(s) to hasten binary exploit creation

🌸 Interactive shellcoding environment to easily craft shellcodes

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Vulnerability Labs for security analysis

Exploiting Edge's read:// urlhandler

Here you can get full exploit for SAP NetWeaver AS JAVA

A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda

PoC exploit for CVE-2016-4622

Reverse Shell as a Service

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

Thoron Framework is a Linux post-exploitation framework that exploits Linux TCP vulnerability to provide a shell-like connection. Thoron Framework has the ability to create simple payloads to provide Linux TCP attack.

Advanced vulnerability scanning with Nmap NSE

pwninit - automate starting binary exploit challenges

This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Powerful dork searcher and vulnerability scanner for windows platform

Extraction of iMessage Data via XSS

rsGen is a Reverse Shell Payload Generator for hacking.

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner

A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs

DoS PoC's for SAP products

Some of my public exploits

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Exploiting challenges in Linux and Windows

A collection of my quick and dirty scripts for vulnerability POC and detections

Kubernetes security and vulnerability tools and utilities.

CTF binary exploit code

IoT 固件漏洞复现环境

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

Unsigned code loader for Exynos BootROM

Extensible framework for analyzing publicly available information about vulnerabilities

CTF中Pwn的快速利用模板（包含awd pwn）