Projects in Awesome Lists tagged with exploitation

https://github.com/sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

database detection exploitation pentesting python sql-injection sqlmap takeover vulnerability-scanner

Last synced: 12 May 2025

https://github.com/Sundowndev/hacker-roadmap

A collection of hacking tools, resources and references to practice ethical hacking.

exploitation frameworks hacking hacking-tool hacktools information-gathering penetration-testing pentest pentesting post-exploitation roadmap security web-hacking

Last synced: 13 Mar 2025

https://github.com/sundowndev/hacker-roadmap

A collection of hacking tools, resources and references to practice ethical hacking.

exploitation frameworks hacking hacking-tool hacktools information-gathering penetration-testing pentest pentesting post-exploitation roadmap security web-hacking

Last synced: 29 Sep 2025

https://github.com/manisso/fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

brute-force-attacks desktop exploitation finder fsociety fsociety-hacking information-gathering network penetration-testing-framework port-scanning post-exploitation python web-hacking

Last synced: 13 May 2025

https://github.com/Manisso/fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

brute-force-attacks desktop exploitation finder fsociety fsociety-hacking information-gathering network penetration-testing-framework port-scanning post-exploitation python web-hacking

Last synced: 15 Mar 2025

https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory active-directory-cheatsheet active-directory-exploitation activedirectory attack cheat cheat-sheet cheatsheet enumeration exploitation hacking hacking-cheasheet hacking-tool hacking-tools penetration-testing pentesting privilege-escalation security windows windows-active-directory

Last synced: 01 Apr 2025

https://github.com/s1ckb0y1337/active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory active-directory-cheatsheet active-directory-exploitation activedirectory attack cheat cheat-sheet cheatsheet enumeration exploitation hacking hacking-cheasheet hacking-tool hacking-tools penetration-testing pentesting privilege-escalation security windows windows-active-directory

Last synced: 12 Feb 2026

https://github.com/RPISEC/MBE

Course materials for Modern Binary Exploitation by RPISEC

ctf exploitation wargame

Last synced: 11 May 2025

https://github.com/rpisec/mbe

Course materials for Modern Binary Exploitation by RPISEC

ctf exploitation wargame

Last synced: 02 Apr 2025

https://github.com/commixproject/commix

Automated All-in-One OS Command Injection Exploitation Tool.

bugbounty command-injection commix detection exploitation open-source pentesting python takeover vulnerability-scanner

Last synced: 13 May 2025

https://github.com/nullarray/autosploit

Automated Mass Exploiter

automation exploit exploitation metasploit offsec python security security-tools

Last synced: 14 May 2025

https://github.com/NullArray/AutoSploit

Automated Mass Exploiter

automation exploit exploitation metasploit offsec python security security-tools

Last synced: 26 Mar 2025

https://github.com/s3cur3th1ssh1t/winpwn

Automation for internal Windows Penetrationtest / AD-Security

adsecurity automation exploitation pentest-tool pentesting powershell powersploit privilege-escalation recon redteam

Last synced: 13 May 2025

https://github.com/S3cur3Th1sSh1t/WinPwn

Automation for internal Windows Penetrationtest / AD-Security

adsecurity automation exploitation pentest-tool pentesting powershell powersploit privilege-escalation recon redteam

Last synced: 30 Mar 2025

https://github.com/almandin/fuxploider

File upload vulnerability scanner and exploitation tool.

detection exploitation pentesting python3 takeover vulnerability-scanner

Last synced: 15 May 2025

https://github.com/swisskyrepo/ssrfmap

Automatic SSRF fuzzer and exploitation tool

ctf exploitation hacktoberfest pentest server-side-request-forgery ssrf ssrfmap vulnerability

Last synced: 23 Apr 2025

https://github.com/corkami/collisions

Hash collisions and exploitations

collisions exploitation hash md5 scripts sha1

Last synced: 14 May 2025

https://github.com/swisskyrepo/SSRFmap

Automatic SSRF fuzzer and exploitation tool

ctf exploitation hacktoberfest pentest server-side-request-forgery ssrf ssrfmap vulnerability

Last synced: 02 Apr 2025

https://github.com/rizinorg/rizin

UNIX-like reverse engineering framework and command-line toolset.

debugging exploitation program-analysis reverse-engineering security

Last synced: 12 May 2025

https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory active-directory-cheatsheet active-directory-exploitation cheat-sheet cheatsheet enumeration exploitation hacking hacking-cheasheet hacking-tool hacking-tools infosec penetration-testing pentesting powershell privilege-escalation security windows windows-active-directory

Last synced: 02 Apr 2025

https://github.com/integration-it/active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory active-directory-cheatsheet active-directory-exploitation cheat-sheet cheatsheet enumeration exploitation hacking hacking-cheasheet hacking-tool hacking-tools infosec penetration-testing pentesting powershell privilege-escalation security windows windows-active-directory

Last synced: 03 Mar 2026

https://github.com/ashemery/exploitation-course

Offensive Software Exploitation Course

exploitation exploitation-course exploitdev offensive ose

Last synced: 08 Oct 2025

https://github.com/hacksysteam/hacksysextremevulnerabledriver

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

buffer-overflow driver exploit-development exploitation hevd info-leak kernel linux memory-corruption type-confusion uaf vulnerabilities windows

Last synced: 28 Jan 2026

https://github.com/hacksysteam/HackSysExtremeVulnerableDriver

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

buffer-overflow driver exploit-development exploitation hevd info-leak kernel linux memory-corruption type-confusion uaf vulnerabilities windows

Last synced: 10 Apr 2025

https://github.com/megamansec/ssh-snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

bash cybersecurity exploitation exploitation-tool hacking hacking-tools pentesting post-exploitation redteam scanner security security-tools shell ssh ssh-hacking vulnerability-scanner worm

Last synced: 15 May 2025

https://github.com/lefayjey/linwinpwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

active-directory adcs adsecurity bloodhound enumeration exploitation hacking impacket kerberoast kerberos mssql penetration-testing pentest pentest-tool pentesting

Last synced: 23 Oct 2025

https://github.com/xyntax/poc-t

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

exploitation pentesting vulnerability-scanner

Last synced: 15 May 2025

https://github.com/Xyntax/POC-T

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

exploitation pentesting vulnerability-scanner

Last synced: 30 Mar 2025

https://github.com/sashs/ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

binary exploitation gadget-finder gadgets rop rop-chains

Last synced: 25 Apr 2025

https://github.com/sashs/Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

binary exploitation gadget-finder gadgets rop rop-chains

Last synced: 13 Mar 2025

https://github.com/lefayjey/linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

active-directory adcs adsecurity bloodhound enumeration exploitation hacking impacket kerberoast kerberos mssql penetration-testing pentest pentest-tool pentesting

Last synced: 12 Jul 2025

https://github.com/0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

enumeration exploitation footprinting intelligence-gathering osint reconnaissance scanning-enumeration tidos-framework vulnerability-analysis vulnerability-detection web-application-security web-fuzzer web-penetration-testing

Last synced: 15 Dec 2025

https://github.com/0xInfection/TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

enumeration exploitation footprinting intelligence-gathering osint reconnaissance scanning-enumeration tidos-framework vulnerability-analysis vulnerability-detection web-application-security web-fuzzer web-penetration-testing

Last synced: 28 Mar 2025

https://github.com/lucasjacks0n/eggshell

iOS/macOS/Linux Remote Administration Tool

exploitation information-security ios jailbreak macos metasploit meterpreter pentest-scripts pentest-tool remote-admin-tool reverse-shell

Last synced: 15 May 2025

https://github.com/lucasjacks0n/EggShell

iOS/macOS/Linux Remote Administration Tool

exploitation information-security ios jailbreak macos metasploit meterpreter pentest-scripts pentest-tool remote-admin-tool reverse-shell

Last synced: 24 Mar 2025

https://github.com/hack-with-github/windows

Awesome tools to exploit Windows !

exploitation exploiting-windows post-exploitation-powershell powershell powershell-payload powershell-script windows-hacking windows-machine

Last synced: 02 Oct 2025

https://github.com/dolevf/damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

damn-vulnerable damn-vulnerable-web-application exploitation graphql graphql-security penetration-testing security vulnerability

Last synced: 15 May 2025

https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

damn-vulnerable damn-vulnerable-web-application exploitation graphql graphql-security penetration-testing security vulnerability

Last synced: 04 Apr 2025

https://github.com/Hack-with-Github/Windows

Awesome tools to exploit Windows !

exploitation exploiting-windows post-exploitation-powershell powershell powershell-payload powershell-script windows-hacking windows-machine

Last synced: 30 Mar 2025

https://github.com/AlisamTechnology/ATSCAN

Advanced dork Search & Mass Exploit Scanner

data dork engine exploitation lfi linux mass-exploitation-scanner ports portscan rfi scanner security server shell sqli system tools vulnerability-scanners web-application xss

Last synced: 26 Mar 2025

https://github.com/alisamtechnology/atscan

Advanced dork Search & Mass Exploit Scanner

data dork engine exploitation lfi linux mass-exploitation-scanner ports portscan rfi scanner security server shell sqli system tools vulnerability-scanners web-application xss

Last synced: 07 Apr 2025

https://github.com/mufeedvh/moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

cve exploit exploitation infosec infosectools linux privilege-escalation red-teaming redteam redteam-tools security security-tools

Last synced: 16 May 2025

https://github.com/wadcoms/wadcoms.github.io

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

blueteam cheatsheet commands enumeration exploitation persistence privilege-escalation redteam wadcoms windows

Last synced: 16 Aug 2025

https://github.com/WADComs/WADComs.github.io

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

blueteam cheatsheet commands enumeration exploitation persistence privilege-escalation redteam wadcoms windows

Last synced: 13 Apr 2025

https://github.com/the404hacking/androrat

AndroRAT | Remote Administrator Tool for Android OS Hacking

administrator android android-application androrat exploit exploitation phone plateform rat remote remote-administrator-tool the404hacking

Last synced: 16 May 2025

https://github.com/virb3/magisk-frida

🔐 Run frida-server on boot with Magisk, always up-to-date

android exploitation frida magisk reverse-engineering root security

Last synced: 08 May 2026

https://github.com/t3l3machus/toxssin

An XSS exploitation command-line interface and payload generator.

cross-site-scripting exploitation hacking javascript penetration-testing pentesting-tools python web-penetration-testing xss xss-exploitation xss-vulnerability

Last synced: 13 Apr 2025

https://github.com/stong/how-to-exploit-a-double-free

How to exploit a double free vulnerability in 2021. Use After Free for Dummies

binary ctf double-free exploitation heap lock-free microarchitecture pwn tutorial use-after-free walkthrough

Last synced: 14 May 2025

https://github.com/0xricksanchez/paper_collection

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

directed-fuzzing embedded exploitation fuzzing fuzzing-binaries guided-fuzzing hybrid-fuzzing iot kernel linux linux-kernel mitigations paper rca root-cause sanitizer vulnerability-detection

Last synced: 13 Apr 2025

https://github.com/rosehgal/BinExp

Linux Binary Exploitation

binaries buffer-overflow-attack bufferoverflow consolidation exploitation format-string-attack global-offset-table got-spawning-shell heap-exploitation linux overriding-got ret2libc return-to-libc shellcode-injector stackoverflow tutorial vulnerabilities

Last synced: 28 Mar 2025

https://github.com/rosehgal/binexp

Linux Binary Exploitation

binaries buffer-overflow-attack bufferoverflow consolidation exploitation format-string-attack global-offset-table got-spawning-shell heap-exploitation linux overriding-got ret2libc return-to-libc shellcode-injector stackoverflow tutorial vulnerabilities

Last synced: 16 May 2025

https://github.com/arch3rPro/PentestTools

Awesome Pentest Tools Collection

command-injection exploitation penetration-testing pentest-tool vulnerability-scanners

Last synced: 05 Apr 2025

https://github.com/arch3rpro/pentesttools

Awesome Pentest Tools Collection

command-injection exploitation penetration-testing pentest-tool vulnerability-scanners

Last synced: 27 Jan 2026

https://github.com/jxy-s/herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

antivirus antivirus-evasion exploit exploit-development exploit-framework exploitation exploits process-doppelganging process-herpaderping process-hollowing process-migration security security-vulnerability vulnerability windows windows-10 windows-7 windows-defender

Last synced: 16 May 2025

https://github.com/nccgroup/featherduster

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

cryptanalysis crypto cryptography encryption exploit exploitation exploitation-framework exploits python security

Last synced: 16 May 2025

https://github.com/MegaManSec/SSH-Snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

bash cybersecurity exploitation exploitation-tool hacking hacking-tools pentesting post-exploitation redteam scanner security security-tools shell ssh ssh-hacking vulnerability-scanner worm

Last synced: 11 Apr 2025

https://github.com/safebuffer/sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

active-directory exploitation redteam s4u2self

Last synced: 08 Oct 2025

https://github.com/utkusen/leviathan

wide range mass audit toolkit

brute-force exploitation port-scanning python service-discovery sql-injection

Last synced: 26 Mar 2025

https://github.com/GamehunterKaan/AutoPWN-Suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

cybersecurity exploitation hacking hacking-tools infosec nmap penetration-testing pentesting python python3 scanner scanners scanning security security-tools vulnerability-scanners

Last synced: 06 Apr 2025

https://github.com/adi0x90/attifyos

Attify OS - Distro for pentesting IoT devices

embedded exploitation hacking hardware internet-of-things iot iot-pentesting security

Last synced: 11 Jul 2025

https://github.com/ViRb3/magisk-frida

🔐 Run frida-server on boot with Magisk, always up-to-date

android exploitation frida magisk reverse-engineering root security

Last synced: 20 Mar 2025

https://github.com/bkerler/exploit_me

Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 14 vulnerability techniques)

arm ctf exploitation rop tutorial

Last synced: 30 Apr 2025

https://github.com/spawnmason/randar-explanation

"Randar" is an exploit for Minecraft which uses LLL lattice reduction to crack the internal state of an incorrectly reused java.util.Random in the Minecraft server, then works backwards from that to locate other players currently loaded into the world.

2b2t exploit exploitation lattice lattice-reduction lll minecraft munmap papermc radar randar random rng spawnmason spawnmasons

Last synced: 12 Apr 2025

https://github.com/nerdsinspace/nocom-explanation

block game military grade radar

2b2t exploit exploitation minecraft nocom nocomment papermc radar

Last synced: 12 Apr 2025

https://github.com/cryptogenic/exploit-writeups

A collection where my current and future writeups for exploits/CTF will go

capture-the-flag exploit-development exploitation vulnerabilities

Last synced: 02 Apr 2025

https://github.com/Cryptogenic/Exploit-Writeups

A collection where my current and future writeups for exploits/CTF will go

capture-the-flag exploit-development exploitation vulnerabilities

Last synced: 13 Mar 2025

https://github.com/danigargu/heap-viewer

IDA Pro plugin to examine the glibc heap, focused on exploit development

exploit exploitation glibc heap ida-plugin ida-pro idapython idapython-plugin python

Last synced: 15 Mar 2025

https://github.com/incredibleindishell/ssrf_vulnerable_lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

attack exploitation hacking lab server-side-request-forgery ssrf web-security

Last synced: 02 Apr 2025

https://github.com/incredibleindishell/SSRF_Vulnerable_Lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

attack exploitation hacking lab server-side-request-forgery ssrf web-security

Last synced: 22 Apr 2025

https://github.com/rek7/fireelf

fireELF - Fileless Linux Malware Framework

backdoor exploit-development exploitation exploitation-framework framework linux malware malware-development pentesting python redteam security security-tools

Last synced: 05 Apr 2025

https://github.com/0xb0bb/pwndra

A collection of pwn/CTF related utilities for Ghidra

ctf ctf-tools exploitation ghidra ghidra-scripts pwn reverse-engineering

Last synced: 13 May 2025

https://github.com/rek7/fireELF

fireELF - Fileless Linux Malware Framework

backdoor exploit-development exploitation exploitation-framework framework linux malware malware-development pentesting python redteam security security-tools

Last synced: 28 Mar 2025

https://github.com/brompwnie/botb

A container analysis and exploitation tool for pentesters and engineers.

container-analysis container-breakout docker-daemon exploitation metadata-endpoints pentesters procfs unix-domain-sockets

Last synced: 12 Jan 2026

https://github.com/anon-exploiter/suid3num

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

auto-exploitation boot2root exploitation gtfo gtfo-bin gtfobins htb oscp oscp-tools pentest pentest-tools pentesting privilege-escalation python python-3 standalone-python-script suid suid-binaries suid3num vulnhub

Last synced: 04 Apr 2025

https://github.com/bishopfox/badpods

A collection of manifests that will create pods with elevated privileges.

assessment exploitation hostipc hostnetwork hostpath hostpid kubernetes penetration-testing pods podspec privileged security

Last synced: 04 Apr 2025

https://github.com/rek7/mXtract

mXtract - Memory Extractor & Analyzer

c-plus-plus cpp cpp11 credentials exploitation linux malware memory-hacking pentesting redteam regex security security-tools stealing

Last synced: 30 Mar 2025

https://github.com/rek7/mxtract

mXtract - Memory Extractor & Analyzer

c-plus-plus cpp cpp11 credentials exploitation linux malware memory-hacking pentesting redteam regex security security-tools stealing

Last synced: 04 Apr 2025

https://github.com/sgayou/subaru-starlink-research

Subaru StarLink persistent root code execution.

exploitation jailbreak reverse-engineering vulnerability-research

Last synced: 22 Jul 2025

https://github.com/luisfontes19/xxexploiter

Tool to help exploit XXE vulnerabilities

cdata command dtd entities exection expect exploit exploitation external file oob read ssrf xee xml xxe

Last synced: 10 Apr 2026

https://github.com/entysec/seashell

SeaShell Framework is an iOS post-exploitation framework that enables you to access the device remotely, control it and extract sensitive information.

exploit exploitation ios ios-exploit ios-exploitation ios-hacking ios-malware ipados jailbreak post-exploitation post-exploitation-toolkit remote-access-tool remote-admin-tool reverse-shell trollstore

Last synced: 09 Apr 2025

https://github.com/codingranjith/hackingtoolkit

ALL IN ONE Hacking Tool For Hackers, Penetration Tester and Cybersecurity. New Version Beginner to Advanced Tool. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

allinonehackingtool android-hacking-tools anonymously-hiding-tools cyber-security ddos-attack-tools exploitation hackerstool hacking hackingtoolkit hackingtools information-gathering-tools kalilinux metasploit payload payload-creation-tools penetration-testing phishing-attack-tools socialmedia-bruteforce web-attack-tools wordlist-generator