399 Open source projects that are alternatives of or similar to Ps4 5.01 Webkit Exploit Poc

Advanced Web Browser Fingerprinting

windows-kernel-exploits Windows平台提权漏洞集合

A Ruby micro-framework for writing and running exploits

Blueborne CVE-2017-0781 Android heap overflow vulnerability

Rage allows you to execute any file in a Microsoft Office document.

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

Website screenshot service powered by Node.js, SlimerJS and PhantomJS

Collection of bash scripts I wrote to make my life easier or test myself that you may find useful.

A collection of electronic hacker magazines carefully curated over the years from multiple sources

CTF中Pwn的快速利用模板（包含awd pwn）

Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.

Blazing fast, advanced Padding Oracle exploit

Reference: http://www.secgeek.net/bookfresh-vulnerability/

RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.

hack tools

CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Some of my CTF solutions

A number of scripts POC's and problems solved as pentests move along.

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware

pwninit - automate starting binary exploit challenges

Extensible framework for analyzing publicly available information about vulnerabilities

Proofs-of-concept

Kubernetes security and vulnerability tools and utilities.

exploit

Guest to host VM escape exploit for Parallels Desktop

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

Windows MSI Installer LPE (CVE-2021-43883)

Python version of the Playwright testing and automation library.

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE

Mikrotik RouterOS (6.x < 6.38.5) exploit kit. Reverse engineered from the "Vault 7" WikiLeaks publication.

Exploiting challenges in Linux and Windows

CVE-2018-8120 Windows LPE exploit

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

200 TOOLS BY 0XID4FF0X FOR TERMUX

Vulnerable software and exploits used for OSCP/OSCE preparation

Hypervisor Memory Introspection Core Library

gtfo, now with the speed of golang

Disabling kernel lockdown on Ubuntu without physical access

Self defense post module for metasploit

Desktop runtime for apps built on web technologies, using the system's own web browser engine

The first tool to download any Guitar Pro file, including 'Official' from Ultimate Guitar

RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1

Basic tool to automate backdooring PE files

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

Here you can get full exploit for SAP NetWeaver AS JAVA

Detect deauthentication frames using an ESP8266

generate and search pattern string for exploit development

Official mirror of hg.adium.im

SVScanner - Scanner Vulnerability And MaSsive Exploit.

A general purpose memory allocator that implements an isolation security strategy to mitigate memory safety issues while maintaining good performance

Nailgun attack on ARM devices.

Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)

An IDA Pro plugin to examine the glibc heap, focused on exploit development

Network based protocol fuzzer