684 Open source projects that are alternatives of or similar to One_gadget

build-once run-anywhere c library

Tiny, fast, non-dependent and fully loaded printf implementation for embedded systems. Extensive test suite passing.

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Simple program for detecting if host(s) are vulnerable to SMB exploit(MS17-010)

Multiplatform reverse shell generator

One of the few malware collection

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

Powerful dork searcher and vulnerability scanner for windows platform

Hypervisor Memory Introspection Core Library

Samsung Galaxy S3 GT-I9300 eMMC toolbox

Collection of things made during my OSCP journey

Multi-language web CGI interfaces exploits.

Advanced Web Browser Fingerprinting

Blueborne CVE-2017-0785 Android information leak vulnerability

Library for parsing ELF files written in pure Go.

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.

A Ruby micro-framework for writing and running exploits

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

💼 Pools organized for Epitech's students in 2020.

Focus on cybersecurity | collection of PoC and Exploits

An automatic and lightweight web application scanning tool for CTF.

Imagine your SSH server only listens on an IPv6 address, and where the last 6 digits are changing every 30 seconds as a TOTP code...

This tool aims at automating the identification of potential service running behind ports identified manually either through manual scan or services running locally. The tool is useful when nmap or any scanning tool is not available and in the situation during which you did a manual port scanning and then want to identify the services running behind the identified ports.

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

Cloak can backdoor any python script with some tricks.

No description or website provided.

Venom - A Multi-hop Proxy for Penetration Testers

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

Discovering vulnerabilities in firmware through concolic analysis and function clustering.

AML/CTF/KYC/OFAC Search of global watchlist, sanctions, and politically exposed person (PEP)

Writeup of CVE-2020-15906

Collection of bash scripts I wrote to make my life easier or test myself that you may find useful.

网络安全学习资料，欢迎补充

A Collection of Various Discord Bugs, Exploits, Un-Documented Parts of the Discord API, and Other Discord Related Miscellaneous Stuff.

✔️ CTF problems and solutions solved by Qwaz

CTF programs and writeups

Using Intel's PIN tool to solve CTF problems

A flag submitter service with distributed attackers for attack/defense CTF games.

Self contained htaccess shells and attacks

Collection of scripts and writeups

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

Various kernel exploits

RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.

Allows you to crash any Windows user

Git-based CTF

Kindle 5.6.5 exploitation tools.

RuCTFE 2019. Developed with ♥ by HackerDom team

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

Bypassing disabled exec functions in PHP (c) CRLF

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.

AWD 自动化攻击框架

SambaCry exploit and vulnerable container (CVE-2017-7494)

Educational, CTF-styled labs for individuals interested in Memory Forensics

AWD攻防赛webshell批量利用框架

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors

A Discord bot that provides ctf tools for collaboration in Discord servers!

Fully Featured Nintendo DS Loader for Ghidra

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

Reverse Shell Cheat Sheet TooL

A docker repository for deploying pwnable challenges in CTF