Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

Exploit

Exploit refers to a piece of code or technique that takes advantage of a security vulnerability in a system, application, or network to cause unintended behavior. Exploits can be used by attackers to gain unauthorized access, escalate privileges, execute arbitrary code, or cause a denial of service. This topic covers the various types of exploits, such as zero-day exploits, remote code execution, and privilege escalation. It also explores the lifecycle of an exploit, from discovery and development to deployment and mitigation, and highlights the importance of vulnerability management and patching in preventing exploits.

https://github.com/krisnova/hack

Kubernetes security and vulnerability tools and utilities.

exploit hack kubernetes research security tools vector vulnerability

Last synced: 30 Dec 2024

https://github.com/adrianbzg/twitter-follow-exploit

Automated Twitter mass account creation and follow using Selenium and Tor VPN

exploit mass-account-creation open-source twitter twitter-account-creation twitter-automation twitter-followers

Last synced: 17 Nov 2024

https://github.com/preco21/destiny-macros

A collection of Destiny 2 macros built with AutoHotKey

ahk autohotkey automation destiny2 exploit game macro wtf

Last synced: 06 Jan 2025

https://github.com/gosecure/break-fast-serial

A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs

exploit java security serialization tool vulnerability

Last synced: 05 Nov 2024

https://github.com/moloch--/cve-2016-1764

Extraction of iMessage Data via XSS

cve exploit imessage security vulnerability xss

Last synced: 08 Nov 2024

https://github.com/mariuszskon/autorop

Automated solver of classic CTF pwn challenges, with flexibility in mind.

capture-the-flag ctf exploit hacktoberfest linux pwnable pwntools rop wargame

Last synced: 23 Oct 2024

https://github.com/x64dbg/x64dbgpylib

Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.

development exploit mona python x64dbg

Last synced: 26 Oct 2024

https://github.com/gquere/cve-2020-7931

Hacking Artifactory with server side template injection

artifactory cve-2020-7931 exploit hacking pentest rce

Last synced: 11 Nov 2024

https://github.com/gquere/CVE-2020-7931

Hacking Artifactory with server side template injection

artifactory cve-2020-7931 exploit hacking pentest rce

Last synced: 21 Nov 2024

https://github.com/k2/languagebackdoors

Compiler exploits and exploitable non-obvious source code back doors.

attack backdoor compiler exploit undefined-behavior

Last synced: 19 Dec 2024

https://github.com/cokebeer/pyyso

pyyso is a Python package that generate java serialized poc. Including CommonsCollections1-7, JDK7u21, JDK8u20, ldap for jndi, shiro-550, CommonsBeanutils1 no cc, JRMPClient, high version JDK Bypass, Fake MySQL for JDBC attack

exploit gadget java jdbc jdk7u21 jdk8u20 jndi jrmp ldap mysql poc python rmi serialization shiro

Last synced: 02 Dec 2024

https://github.com/k8gege/kaliladon

Ladon for Linux (Kali), Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password

bruteforce detection exploit hacking hacking-tool kali ladon ms17010 pentest-tool poc portscanner scanner security-tools

Last synced: 12 Jan 2025

https://github.com/k8gege/KaliLadon

Ladon for Linux (Kali), Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password

bruteforce detection exploit hacking hacking-tool kali ladon ms17010 pentest-tool poc portscanner scanner security-tools

Last synced: 21 Nov 2024

https://github.com/hook-s3c/cve-2018-18852

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

0day cerio cve-2018-18852 exploit rce router

Last synced: 14 Dec 2024

https://github.com/hook-s3c/cve-2019-0708-poc

proof of concept exploit for Microsoft Windows 7 and Server 2008 RDP vulnerability

cve-2019-0708 exploit rdp windows

Last synced: 14 Dec 2024

https://github.com/cr4sh/secretnet_expl

LPE exploits for Secret Net and Secret Net Studio

0day crapware driver exploit fakeav idiots kernel lpe russian-imbiciles security vulnerability windows

Last synced: 23 Nov 2024

https://github.com/k8gege/solrexp

Apache Solr <=8.2.0 Velocity Template 0day Exploit

0day apache exp exploit getshell k8cscan rce solr

Last synced: 13 Nov 2024

https://github.com/p0dalirius/remotemouse-3.008-exploit

This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.

exploit pentest remote-control remotemouse

Last synced: 30 Dec 2024

https://github.com/p0dalirius/cve-2022-45771-pwndoc-lfi-to-rce

Pwndoc local file inclusion to remote code execution of Node.js code on the server

cve-2022-45771 exploit pwndoc rce

Last synced: 30 Dec 2024

https://github.com/davidbuchanan314/wampage

WAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)

arm cve-2022-23731 exploit javascript lg-webos lg-webos-tv lpe python v8 webos webos-tv

Last synced: 07 Nov 2024

https://github.com/S1lkys/CVE-2020-15906

Writeup of CVE-2020-15906

cve cve-2020-15906 exploit exploitation

Last synced: 21 Nov 2024

https://github.com/hwvs/invoke-gptobfuscation

Powershell implementation of a novel technique. Invoke-GPTObfuscation is a PowerShell Obfuscator that utilizes OpenAI (and other APIs) to obfuscate your PowerShell penetration testing code, malware, or any other sensitive script.

exploit exploitation-framework malware-research powershell powershell-module windows-desktop

Last synced: 01 Dec 2024

https://github.com/s1lkys/cve-2020-15906

Writeup of CVE-2020-15906

cve cve-2020-15906 exploit exploitation

Last synced: 14 Dec 2024

https://github.com/k8gege/ms17010exp

Ladon Moudle MS17010 Exploit for PowerShell

exp exploit hacking hacking-tool ladon ladon-poc ms17010 pentest

Last synced: 13 Nov 2024

https://github.com/farisv/prestashop-cve-2018-19126

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

exploit prestashop web-security

Last synced: 10 Oct 2024

https://github.com/saelo/feuerfuchs

Files for the "feuerfuchs" challenge of 33C3 CTF. See the greeting message in server.py for more information about the challenge

ctf exploit

Last synced: 20 Nov 2024

https://github.com/inspiringz/CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc (Interactive Bash Shell & Execute Command Entered)

cve-2021-3493 exploit linux privesc ubuntu

Last synced: 21 Nov 2024

https://github.com/sdushantha/getroot

🛠️ Tool to bypass my school's security system to get sudo privileges on MacOS

bypass exploit root security sudo

Last synced: 25 Jan 2025

https://github.com/xsscx/xnuimagefuzzer

XNU Image Fuzzer - iOS App for Fuzzing Images with Objective-C Code covering 12 CGCreateBitmap & CGColorSpace Functions working with Raw Data and String Injection.

crash debugging exploit file fuzz fuzzing graphics image imagefuzzer interposing ios iosonmac macos objective-c research security utt xcode xnu

Last synced: 12 Oct 2024

https://github.com/k8gege/phpstudydoor

PhpStudy 2016 & 2018 BackDoor Exploit

backdoor exploit hacking k8cscan pentest pentest-tool phpstudy security

Last synced: 13 Nov 2024

https://github.com/k8gege/k8badusb

BadUSB Teensy downexec exploit support Windows & Linux / Windows Cmd & PowerShell addUser exploit

badusb downexec exploit hacking pentest powershell security tennsy

Last synced: 13 Nov 2024

https://github.com/kovart/forta-attack-simulation

🦠🔬 Forta bot that detects deployment of smart contracts containing an exploit function

agent attack blockchain bot ethereum exploit forta prevention simulation

Last synced: 16 Nov 2024

https://github.com/yuriisanin/CVE-2022-24342

PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication

csrf cve cve-2022-24342 exploit jetbrains teamcity vulnerability

Last synced: 23 Oct 2024

https://github.com/merrychap/poc-exploits

:unlock: Vulnerability Research and Proof of Concept exploits for various targets

cve exploit exploitation poc proof-of-concept pwn vulnerabilities vulnerability

Last synced: 21 Jan 2025

https://github.com/rwfpl/rewolf-pcausa-exploit

PCAUSA Rawether for Windows Local Privilege Escalation

exploit pcausa privilege-escalation rawether reverse-engineering

Last synced: 06 Nov 2024

https://github.com/tyoxlx/roblox-synapse

Roblox Synapse Executor is a top-tier script execution tool for Roblox, valued for its advanced features and stability, enabling seamless Lua scripting for game modifications and customization.

authentication bloxfruit-script bloxfruits-autofarm-script bloxfruits-hack-script executer exploit game gui hack lua nexus-roblox roblox roblox-lua roblox-script roblox-scripts roblox-synapse robloxscripts script-hub supported whitelist

Last synced: 23 Dec 2024

https://github.com/err0r-ica/whatspayloadrce

Whatsapp Automatic Payload Generator [CVE-2019-11932]

cve exploit hacking hacking-tools linux payload termux whatsapp whatsapp-chat

Last synced: 14 Oct 2024

https://github.com/xh4h/loki

The Dependency Confusion vulnerability scanner and autoexploitation tool to help identifying and mitigating supply chain attacks

attacks chain confusion dependency exploit migitation poc supply vulnerability-scanners

Last synced: 14 Dec 2024

https://github.com/Josexv1/CVE-2022-27925

Zimbra CVE-2022-27925 PoC

cve cve-2022-27925 exploit poc zimbra

Last synced: 23 Oct 2024

https://github.com/i32-sudo/eacbypass-cr3readydrv

This is my EAC Bypass (Setup) Driver that offers an undetected communication and callback handler/hooking system through IOCTL.

anti bypass cheat cr3 driver eac easy easy-anti-cheat exploit ioctl kernel read undetected write

Last synced: 15 Nov 2024

https://github.com/r3dxpl0it/CVE-2018-4407

IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]

attack blueteam cve cyber-security cybersecurity denial-of-service exploit hacking hacking-tool ios macos network penetration-testing poc redteam security

Last synced: 10 Nov 2024

https://github.com/p0dalirius/moodle-webshell-plugin

A webshell plugin and interactive shell for pentesting a Moodle instance.

exploit moodle pentest plugin rce webshell

Last synced: 30 Dec 2024

https://github.com/xaviermilgo/Chimay-Red-tiny

This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.

chimay-red exploit mikrotik mikrotik-router vulnerability wikileaks

Last synced: 29 Oct 2024

https://github.com/reivhax/Chimay-Red-tiny

This is a minified exploit for mikrotik routers. It does not require any aditional modules to run.

chimay-red exploit mikrotik mikrotik-router vulnerability wikileaks

Last synced: 05 Dec 2024

https://github.com/leadroyal/cve-2024-37051-exp

CVE-2024-37051 poc and exploit

cve-2024-37051 exploit payload

Last synced: 11 Jan 2025

https://github.com/mobsf/mobsf-related-materials

MobSF related Presentations, Slides and Others.

exploit mobsf poc reversing scripts slides tools vulnerable

Last synced: 09 Nov 2024

https://github.com/egebalci/ticketbleed

This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.

exploit f5 ticketbleed tls

Last synced: 18 Nov 2024

https://github.com/hupe1980/gopwn

Golang CTF framework and exploit development module

binary cave ctf ctf-framework elf exploit golang macho pe shellcode

Last synced: 07 Dec 2024

https://github.com/cr4sh/prl_guest_to_host

Guest to host VM escape exploit for Parallels Desktop

0day exploit hypervisor not-a-bug vulnerability

Last synced: 23 Nov 2024

https://github.com/knqyf263/CVE-2020-10749

CVE-2020-10749 PoC (Kubernetes MitM attacks via IPv6 rogue router advertisements)

exploit ipv6 kubernetes vulnerability

Last synced: 17 Nov 2024

https://github.com/knqyf263/cve-2020-10749

CVE-2020-10749 PoC (Kubernetes MitM attacks via IPv6 rogue router advertisements)

exploit ipv6 kubernetes vulnerability

Last synced: 13 Oct 2024

https://github.com/cawfree/sameorigin

🤖 🧪 Masquerade as if you were their own frontend.

axios blur bypass cloudflare cors exploit marketplace nft opensea puppeteer

Last synced: 12 Oct 2024

https://github.com/thewhiteh4t/warsend

Apache Tomcat Manager API WAR Shell Upload

apache exploit reverse-shell shell thewhiteh4t tomcat war

Last synced: 15 Nov 2024

https://github.com/nullarray/shellshocker

A Bash script to test a list of URLs for the shellshock vulnerability.

bash exploit pentest pentesting shell shellshock-vulnerability

Last synced: 14 Oct 2024

https://github.com/oppsec/wsob

😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

cve-2022-29464 exploit python wso2

Last synced: 08 Nov 2024

https://github.com/inndy/formatstring-exploit

Dead simple format string exploit payload generator

ctf exploit printf

Last synced: 10 Nov 2024

https://github.com/karthikuj/cve-2022-31101

Exploit for PrestaShop bockwishlist module 2.1.0 SQLi (CVE-2022-31101)

blockwishlist cve-2022-31101 exploit prestashop

Last synced: 10 Oct 2024

https://github.com/mauricelambert/cve-2022-21907

CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and protection: Powershell. Demonstration: Youtube.

bluescreen crash cve cve-2022-21907 denial-of-service detection dos exploit iis metasploit microsoft nmap payload powershell protection python3 ruby vulnerability webserver

Last synced: 14 Nov 2024

https://github.com/0xAsuka/shu-shell

Webshell Jumping Edition

exploit file-manager symlink webshell

Last synced: 17 Nov 2024

https://github.com/limbenjamin/LogServiceCrash

POC code to crash Windows Event Logger Service

crash eventlog exploit windows

Last synced: 21 Nov 2024

https://github.com/farisv/appledos

Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)

apple dos-attack exploit

Last synced: 24 Nov 2024

https://github.com/adamyordan/offbyslash-django-dumper

A proof of concept to dump Django website's source code affected by NGINX's off-by-slash alias directive misconfiguration.

django dumper exploit nginx poc security source-code vulnerability web-security

Last synced: 07 Nov 2024

https://github.com/jcubic/jsh.php

Terminal like php shell (PHP web terminal emulator)

exploit shell terminal-app vulnerability web-shell web-terminal

Last synced: 08 Nov 2024

https://github.com/3ndg4me/cve-2020-3452-exploit

Just basic scanner abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of the CISCO ASA applicances.

bash cisco cve cve-2020-3452 exploit hacktoberfest shell vulnerability

Last synced: 29 Oct 2024

https://github.com/r3li4nt/road-to-hacking

¿Quieres empezar en el mundo hacking? En esta revista te enseño a instalar Kali Linux desde cero y a manipular herramientas esenciales en el Hacking Ético.

cracking ebook espanol esteganografia exploit hacking hash kali-linux mitm mitm-attacks payload penetration-testing pentesting phishing privilege-escalation redes sniffing tor web wireless

Last synced: 04 Dec 2024

https://github.com/simonuvarov/expdev

Vulnerable software and exploits used for OSCP/OSCE preparation

corelan exploit osce oscp

Last synced: 18 Nov 2024

https://github.com/jm33-m0/cve-2018-7750

an RCE (remote command execution) approach of CVE-2018-7750

cve-2018-7750 exploit poc

Last synced: 06 Nov 2024

https://github.com/xenomega/xsymlink

Xbox One Symbolic Link Exploit: Access restricted/encrypted volumes using the Xbox File Explorer.

csharp exploit hack reverse-engineering symbolic-links vulnerability xbox

Last synced: 03 Oct 2024

Exploit Awesome Lists
Awesome-Hacking-Resources 261 awesome-hacker-search-engines 503 awesome-vm-exploit 35 bluetoolkit 69 awesome-MLSecOps 186 awesome-cryptocurrency-security 50 awesome-uefi-security 232 awesome-iot-security-resource 204
Exploit Categories
Uncategorized 511 Table of Contents 300 Blogs 187 Vulnerability Writeup 160 Blogs :newspaper: 64 Install 60 Threat Modeling 57 Talks :speaker: 57 Open Source Security Tools 53 Tools :hammer: 35 Repositories 34 Community Resources 22 Tools 22 Blogs and Publications 18 Bootkits :bomb: 18 Firmware 15 Vulnerabilities & Exploits :mag_right: 14 Tool 13 MlSecOps pipeline 11 Attack Vectors 11