290 Open source projects that are alternatives of or similar to Procjack

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Task Hijacking in Android (somebody call it also StrandHogg vulnerability)

在Windows环境下的进程注入方法：远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

A tiny "sandbox" to run untrusted code 🏖️

Blueborne CVE-2017-0785 Android information leak vulnerability

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Net packets capture & injection library designed for Android

Go Web Application Penetration Test

hack tools

🔥 Pyflame: A Ptracing Profiler For Python. This project is deprecated and not maintained.

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

RouterOS Security Research Tooling and Proof of Concepts

hacker, ready for more of our story ! 🚀

Python library using ctypes to search/edit windows / linux / macOS / SunOS programs memory

Ladon Pentest Scanner framework 全平台LadonGo开源内网渗透扫描器框架，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

CMS渗透测试框架-A CMS Exploit Framework

CVE-2020-0796 Remote Code Execution POC

Proof of Concepts

Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield

A large Linux csgo cheat/hack

a plenty of poc based on python

Quick SQLMap Tamper Suggester

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

This repository contains payload to test NoSQL Injections

Proofs-of-concept

A wiki focusing on aggregating and documenting various SQL injection methods

Hacking Charles Web Debugging Proxy

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Image Payload Creating/Injecting tools

AOP framework for .NET (c#, vb, etc)

A linux-based assembly REPL for x86, amd64, armv7, and armv8

Substrate for macOS

A tiny, intuitive, robust, caching solution for injecting SVG files inline into the DOM.

poc or exp of android vulnerability

🎯 SQL Injection Payload List

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

Meltdown Exploit / Proof-of-concept / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

Small tool to package javascript into a valid image file.

💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002

Antivirus evasion project

Inject C# code into a running process

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

🦘 A dependency injection container for C++11, C++14 and later

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

🐈Medusa是一个红队武器库平台，目前包括扫描功能(200+个漏洞)、XSS平台、协同平台、CVE监控等功能，持续开发中 http://medusa.ascotbe.com

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

红队综合渗透框架

🎯 Command Injection Payload List

PoC for triggering buffer overflow via CVE-2020-0796

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

Very simplified shop sales system made in a microservices architecture using quarkus

Koin - a pragmatic lightweight dependency injection framework for Kotlin

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）