684 Open source projects that are alternatives of or similar to One_gadget

pentest framework

Exploit Discord's cache system to remote upload payloads on Discord users machines

Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)

Automated Twitter mass account creation and follow using Selenium and Tor VPN

Good to know, easy to forget information about binaries and their exploitation!

actually first public f00d hack, enjoy

PS / Bash / Python / Other scripts For FUN!

Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities

Thoron Framework is a Linux post-exploitation framework that exploits Linux TCP vulnerability to provide a shell-like connection. Thoron Framework has the ability to create simple payloads to provide Linux TCP attack.

Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]

A collection of electronic hacker magazines carefully curated over the years from multiple sources

Free Labs to Train Your Pentest / CTF Skills

My proof-of-concept exploits for the Linux kernel

CTF writeups

PwnableWeb is a suite of web applications for use in information security training.

Backwards program slice stitching for automatic CTF problem solving.

ctfcli is a tool to manage Capture The Flag events and challenges

Tiny, fast, non-dependent and fully loaded printf implementation for embedded systems. Extensive test suite passing.

Roblox Exploit Source Code Called IceMeme with some cmds, lua c and limited lua execution with simple ui in c#

Samsung Galaxy S3 GT-I9300 eMMC toolbox

A social experiment

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

exploit

Vulnerability Labs for security analysis

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

Focus on cybersecurity | collection of PoC and Exploits

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Key Exchange, Authentication methods along with example challenges from CTFs

This tool aims at automating the identification of potential service running behind ports identified manually either through manual scan or services running locally. The tool is useful when nmap or any scanning tool is not available and in the situation during which you did a manual port scanning and then want to identify the services running behind the identified ports.

Venom - A Multi-hop Proxy for Penetration Testers

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries

Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC

Writeup of CVE-2020-15906

✔️ CTF problems and solutions solved by Qwaz

Remote exploitation framework written in Python

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

Allows you to crash any Windows user

A POSIX-like OS for ARM processors.

CTF Field Guide

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

AWD 自动化攻击框架

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.68

C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)

Writeups for HacktheBox 'boot2root' machines

Riscure Hack Me embedded hardware CTF 2017-2018.

Writeup of security — CTFLearn Challenges.

Docker based Wargame Platform - To practice your CTF skills

fast_io is a C++ general-purpose exception-safe RAII I/O library based on C++ 20 Concepts. It is at least ten times faster than cstdio or iostream.

(mostly web related) web challenge writeups between 2011 and 2015

cve-2019-0604 SharePoint RCE exploit

TCP flow analyzer with sugar for A/D CTF

Hide your payload into .jpg file

📖 [译] SploitFun Linux x86 Exploit 开发系列教程

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Exploiting Edge's read:// urlhandler

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.

DEFCON 2018 Qualification writeups

C/C++ toolchain for MiniOS