exploits

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Exploitation Framework for Embedded Devices

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Decrypted content of eqgrp-auction-file.tar.xz

Linux privilege escalation auditing tool

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

📦 Make security testing of K8s, Docker, and Containerd easier.

🌴Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

A list of resources in different fields of Computer Science

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

Find exploits in local and online databases instantly

Miscellaneous exploit code

A Ruby framework designed to aid in the penetration testing of WordPress systems.

The Correlated CVE Vulnerability And Threat Intelligence Database API

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

Find exploit tool

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

RouterOS Security Research Tooling and Proof of Concepts

kernel privilege escalation enumeration and exploitation framework

Advisories, proof of concept files and exploits that have been made public by @pedrib.

Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

A collection of curated Java Deserialization Exploits

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

for mass exploiting

Repository for information about 0-days exploited in-the-wild.