exploits

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Exploitation Framework for Embedded Devices

Decrypted content of eqgrp-auction-file.tar.xz

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Linux privilege escalation auditing tool

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

🌴Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (Windows提权漏洞合集)

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

A list of resources in different fields of Computer Science (multiple languages)

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

Miscellaneous exploit code

Find exploits in local and online databases instantly

A Ruby framework designed to aid in the penetration testing of WordPress systems.

The Correlated CVE Vulnerability And Threat Intelligence Database API

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

Find exploit tool

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

RouterOS Security Research Tooling and Proof of Concepts

kernel privilege escalation enumeration and exploitation framework

A collection of curated Java Deserialization Exploits

Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

for mass exploiting

Advisories, proof of concept files and exploits that have been made public by @pedrib.

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

EternalRocks worm

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.