This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Exploitation Framework for Embedded Devices

Decrypted content of eqgrp-auction-file.tar.xz

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Linux privilege escalation auditing tool

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

A list of resources in different fields of Computer Science (multiple languages)

Find exploits in local and online databases instantly

Miscellaneous exploit code

A Ruby framework designed to aid in the penetration testing of WordPress systems.

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo

The Correlated CVE Vulnerability And Threat Intelligence Database API

Find exploit tool

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

kernel privilege escalation enumeration and exploitation framework

RouterOS Security Research Tooling and Proof of Concepts

🌴Windows exploits提权漏洞合集，附带编译环境，演示GIF图，漏洞详细信息，可执行文件

A collection of curated Java Deserialization Exploits

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

for mass exploiting

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

EternalRocks worm

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

A handy collection of my public exploits, all in one place.

Vulners Python API wrapper

Exploits and Security Tools Framework 2.0.1