vitalysim / Awesome-Hacking-Resources

A collection of hacking / penetration testing resources to make you better!

exploit reverse-engineering malware mitm hacking owasp penetration-testing ctf privilege-escalation buffer-overflow windows-privilege-escalation privilege-escalation-linux

Updated Aug 1, 2020

Gallopsled / pwntools

Star

CTF framework and exploit development library

python linux exploit assembly python3 bsd ctf defcon pwntools ctf-framework shellcode rop pwnable capture-the-flag wargame python2 shellcoding shellcode-development

Updated Jul 30, 2020
Python

The-Art-of-Hacking / h4cker

Star

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

training exploit hackers hacking cybersecurity penetration-testing exploits vulnerability awesome-list video-course hacker vulnerability-management vulnerability-identification vulnerability-scanners vulnerability-assessment ethical-hacking awesome-lists exploit-development ethicalhacking hacking-series

Updated Aug 1, 2020
Python

SecWiki / windows-kernel-exploits

Star

windows-kernel-exploits Windows平台提权漏洞集合

windows kernel exploit tool collections pentest

Updated Jul 12, 2020
C

NullArray / AutoSploit

Star

Automated Mass Exploiter

python security automation exploit exploitation metasploit offsec security-tools

Updated Jul 23, 2020
Python

IAIK / meltdown

Star

This repository contains several applications, demonstrating the Meltdown bug.

proof-of-concept exploit side-channel

Updated Oct 26, 2019
C

SecWiki / linux-kernel-exploits

Star

linux-kernel-exploits Linux平台提权漏洞集合

linux awesome collection kernel exploit tool pentest

Updated Jul 13, 2020
C

frohoff / ysoserial

Star

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

java serialization exploit jvm deserialization gadget poc vulnerability javadeser

Updated Jul 10, 2020
Java

k8gege / K8tools

Star

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database apt exploit scanner hacking password poc brute-force pentest bypass crack privilege-escalation 0day getshell netscan rar-mysql

Updated Jul 18, 2020
PowerShell

hugsy / gef

Star

GEF - GDB Enhanced Features for exploit devs & reversers

python linux debugging exploit reverse-engineering gdb pwn ctf ida-pro binary-ninja malware-analysis exploit-development

Updated Jul 30, 2020
Python

xairy / linux-kernel-exploitation

Star

A collection of links related to Linux kernel exploitation

security exploit linux-kernel kernel-exploitation privilege-escalation

Updated Jul 23, 2020

firmianay / CTF-All-In-One

Star

CTF竞赛入门指南

security crypto web exploit book reverse-engineering hacking pwn ctf misc

Updated Jul 19, 2020
C

bitsadmin / wesng

Star

Windows Exploit Suggester - Next Generation

microsoft windows exploit patches updates suggester

Updated Jul 25, 2020
Python

k8gege / Ladon

Star

大型内网渗透扫描器&Cobalt Strike，Ladon7.0内置83个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

security tools hack exploit scanner hacking password poc brute-force pentest portscan security-scanner exp security-tools ladon ipscanner getshell netscan

Updated Jul 18, 2020
C#

scipag / vulscan

Star

Advanced vulnerability scanning with Nmap NSE

security security-audit lua exploit lua-script nmap penetration-testing vulnerability vulnerability-databases vulnerability-detection nse vulnerability-identification vulnerability-scanners security-scanner vulnerability-assessment nmap-scripts nsescript nmap-scan-script vulnerability-scanning vulnerability-database-entry

Updated May 22, 2020
Lua

joaomatosf / jexboss

Star

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

reverse-shell exploit deserialization gadget javadeser exploiting-vulnerabilities

Updated Jan 21, 2020
Python

zhzyker / exphub

Star

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340