Exploit

Exploit refers to a piece of code or technique that takes advantage of a security vulnerability in a system, application, or network to cause unintended behavior. Exploits can be used by attackers to gain unauthorized access, escalate privileges, execute arbitrary code, or cause a denial of service. This topic covers the various types of exploits, such as zero-day exploits, remote code execution, and privilege escalation. It also explores the lifecycle of an exploit, from discovery and development to deployment and mitigation, and highlights the importance of vulnerability management and patching in preventing exploits.

GitHub: https://github.com/topics/exploit
Wikipedia: https://en.wikipedia.org/wiki/Exploit_(computer_security)
Created by: The cybersecurity community
Related Topics: hacking, cybersecurity, penetration-testing, vulnerability-assessment,
Aliases: exploits, vulnerability-exploit,
Last updated: 2026-06-20 00:10:26 UTC
JSON Representation

https://github.com/sleepytariq/php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev User-Agentt Backdoor Exploit

exploit php python3

Last synced: 21 May 2026

https://github.com/piotrbania/apple_exploit_talos-2016-0088

apple exploit TALOS-2016-0088

apple exploit hacking macos null-pointer-dereferences

Last synced: 21 May 2026

https://github.com/a0zhar/ps4payloadloader

This repository will be maintained by me. Super simple to use! It has everything needed to build Your own MiraLoader or Payload Launcher refrenced in the PS4JB Repo by Sleirsgoevy

c exploit freebsd playstation4 ps4 ps4-jailbreak ps4-payload ps4exploit ps4jb ps4payload

Last synced: 22 May 2026

https://github.com/examplest/uac-bypass-fud

UAC bypass, Elevate, Persistence methods

administrator-privileges bypass-uac dll-hijacking exploit fodhelperbypass fud hacking uac-bypass uacme user-account-control windows

Last synced: 11 Apr 2025

https://github.com/mrxiaom/banclickwhenusingitem

Minecraft Trident dupe bug fixer | 修复网络包状态不同步导致刷三叉戟漏洞

bugfix duplicate-detection exploit minecraft paper-plugin trident

Last synced: 18 Feb 2026

https://github.com/kernelerr/vlc-cve-2008-4654-exploit

An EXP could run on Windows x64 against CVE-2008-4654.

cve exploit out-of-memory vlc vlc-media-player

Last synced: 16 May 2026

https://github.com/gill-singh-a/docker-api-remote-root-shell-exploit

A Simple Python Program that uses Docker Module to communicate with Docker API and gets a Remote Root Shell on the Target Device

docker exploit python ssh

Last synced: 03 Feb 2026

https://github.com/francescodisalesgithub/downloadsploit

QuickScript to download exploits from exploitdb

download download-exploits exploit exploitdb exploits hacking hacking-tool metasploit quickscript searchsploit

Last synced: 22 Mar 2025

https://github.com/lynk4/cve-2011-2523

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution

cve cve-2011-2523 exploit metasploitable metasploitable-2 metasploitable-3 python vsftpd-exploit

Last synced: 24 Apr 2026

https://github.com/d1se0/cve-2024-21413-vulnerabilidad-outlook-lab

cibersecurity cve cve-2024-21413 exploit hacking hacking-etico lab outlook

Last synced: 12 Jul 2025

https://github.com/ashtondavies/lomoh

Disable admin-forced extensions on managed Chromebooks using the locked mode feature

chromebook chromeos exploit hack unblock

Last synced: 16 May 2025

https://github.com/franckferman/cauchemar-apprendre_le_pwn

Référentiel exhaustif pour acquérir une compréhension approfondie des fondamentaux de l'exploitation de binaires. Fruit d'une démarche analytique rigoureuse, ce guide offre une pédagogie structurée, avec explications détaillées et exemples concrets, pour maîtriser pas à pas l'exploitation de binaires.

apprendre apprendre-les-bases apprendre-pwn binary-exploitation exploit exploit-development exploitation francais francaise france gdb heap-overflow learning pwn pwn-college pwn-course-practice pwndbg pwning reverse-engineering stack-overflow

Last synced: 19 Jan 2026

https://github.com/codeb0ss/cve-2024-1698-poc

Mass Exploit CVE-2024-1698 - Wordpress NotificationX <= 2.8.2 - SQL Injection

codeb0ss codeboss cve-2024 cve-2024-1698 cve-2024-1698-exp cve-2024-1698-poc exploit wordpress

Last synced: 03 May 2025

https://github.com/drdataye/drxploit

DrXploit is a powerful and open-source penetration testing and exploitation tool for web applications. This tool is designed to automate the process of discovering and exploiting vulnerabilities, saving time and effort for security researchers.

bugbounty exploit exploit-db hacking hacking-tool hackweb python3 scanning

Last synced: 08 Jul 2025

https://github.com/crypticq/WP-killer

vulnerability scanner for wordpress

bugbounty cybersecurity exploit exploitation hacking penetration-testing vulnerability-scanners wordpress

Last synced: 10 Mar 2025

https://github.com/hackingyseguridad/CVE-2021-4034

CVE-2021-4034, exploit para escalado de privilegios en SO Linux a root

cve elevar exploit linux privilegios root vuln

Last synced: 10 Mar 2025

https://github.com/whokilleddb/CVE-2019-15107

CVE-2019-15107 Webmin Exploit in C

cve exploit poc vulnerability

Last synced: 10 Mar 2025

https://github.com/5amu/pocbrowser

Scrape websites to find PoCs for CVEs

crystal crystal-lang cve cybersecurity exploit pentesting proof-of-concept scraping security-tool security-tools vulnerability-assessment

Last synced: 08 Jan 2026

https://github.com/lololosys/exploitation_notes

This repository contain common exploitation primites for various platforms

exploit security-research

Last synced: 07 Jan 2026

https://github.com/trigii/cve-2023-42860

Exploit for CVE-2023-42860

apple exploit fda macos root sip tcc

Last synced: 01 Feb 2026

https://github.com/asmroyal/chlorius

chlorius tool from github

ddos ddos-attacks exploit multitool multitoolhacking payload xss

Last synced: 13 Jun 2025

https://github.com/evantesecond/zoom-in-cloaker

when zoomed in to at least 150%, the overlapping content disappears. this is useful for cloaking content

cloak cloaker cloakers cloaking cloaks exploit game games school

Last synced: 25 Mar 2025

https://github.com/p1ckzi/cve-2022-35513

CVE-2022-35513 | blink1-pass-decrypt

blink1-pass-decrypt blink1control2 cve cve-2022-35513 exploit

Last synced: 25 Mar 2025

https://github.com/sarperavci/exploitme

A collection of containerized security vulnerabilities including privilege escalation CVEs and SUID exploits for hands-on penetration testing practice.

ctf cybersecurity docker exploit penetration-testing privilege-escalation security security-training suid vagrant vulnerable

Last synced: 08 Jul 2025

https://github.com/m3hu1/speedtyperexploit

speedtyper.dev exploit written in python

exploit

Last synced: 07 Oct 2025

https://github.com/hyeonjun17/cve-2022-2590-analysis

Dirty COW restricted to shmem in linux kernel

1-day analysis cve-2022-2590 dirty-cow exploit linux linux-kernel memory-management race-condition security shared-memory userfaultfd vulnerability

Last synced: 08 Oct 2025

https://github.com/miguelzacca/afs

Redirection of sensitive form data to a remote server. Self-XSS

cheat dom-manipulation dommanipulation exploit google-hacking googlehacking hacking javascript js json ngrok node nodejs self-xss server vulnerability xss xss-injection

Last synced: 05 May 2026

https://github.com/ytisf/snmplicity

the Swiss Army Knife of the SNMP world, but, it's coded in Python, not made of stainless steel!

cisco code-execution exploit redteam-tools redteaming snmp

Last synced: 15 Oct 2025

https://github.com/r-teamdev/rcheat-injector

exploit game-haking injector lua rcheat-injector roblox roblox-lua roblox-script scripts

Last synced: 14 Mar 2026

https://github.com/kaanaryoverflow/ipfire-2-25-auth-rce

ipfire 2.25 authenticated remote code execution

exploit ipfire rce

Last synced: 19 Oct 2025

https://github.com/hunthubspace/cve-2024-3105-poc

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)

bugbounty cve cve-2024-3105 ethical-hacking exploit penetration-testing web

Last synced: 28 Jan 2026

https://github.com/madexploits/alfa-rce

ALFA SHELL RCE, EXPLOIT

alfa-rce alfa-shell alfa-shell-exploit cgi exploit web-shells webshell

Last synced: 25 Oct 2025

https://gitlab.com/whoatemybutter/letterbomb

✉💣 LetterBomb: A fork of the classic Wii hacking tool from fail0verflow

exploit fail0verflow letterbomb python wii

Last synced: 15 Mar 2026

https://github.com/arpsyndicate/cnnvd-scores

适用于 CNNVD 的 VEDAS 分数聚合器

cnnvd exploit exploit-maturity vedas vulnerability

Last synced: 30 Jan 2026

https://github.com/arpsyndicate/euvd-scores

VEDAS Score Aggregator for EUVDs

euvd exploit exploit-maturity vedas vulnerability

Last synced: 25 Feb 2026

https://github.com/al1ex/cve-2021-3317

CVE-2021-3317

cve-2021-3317 exploit klogserver

Last synced: 01 Feb 2026

https://github.com/jenderal92/git-dump

This script is a tool to recursively download the contents of the '.git' directory from a website. Using Python and libraries like 'requests' and 'BeautifulSoup', this script examines the directory structure, downloads files, and identifies SHA-1 hashes within Git files.

exploit git git-download git-dumper git-dumper-python git-exposed git-vulnerability python python-git-dumper vulnerability vulnerability-git

Last synced: 09 Feb 2026

https://github.com/9dl/websploit

Advanced reconnaissance tool for identifying web vulnerabilities through crowd-sourced data collection

cybersecurity exploit poc proof-of-concept vulnerable

Last synced: 20 Mar 2026

https://github.com/sum-catnip/foundry-rnghax

foundryvtt admin authentication bypass POC exploit

authentication-bypass exploit foundry-vtt poc security

Last synced: 03 Apr 2026

https://github.com/3qnrpdwd/juststone

[ JustStoneTransferProtocol&Backdoor ] This project stems from my interest in protocols and security, leading to the creation of a small backdoor and a proprietary protocol.

api backdoor eternalblue exploit protocol rust secure security socket socket-io

Last synced: 25 Apr 2026

https://github.com/xerosic/leidenfrost

Local privilege escalation on Windows by abusing CMSTP to bypass User Access Control (UAC)

exploit lpe privilege-escalation uac uac-bypass windows

Last synced: 27 Apr 2026

https://github.com/dubniczky/kernel-exploits

Kernel exploits consisting mostly of privilege escalation attacks against core components of Linux distribtions

cve exploit linux linux-exploits linux-kernel

Last synced: 27 Apr 2026

https://github.com/unicordev/exploit-cve-2025-29927

Exploit for CVE-2025-29927 (Next.js) - Authorization Bypass

authorization bypass exploit middleware nextjs python python3

Last synced: 29 Apr 2026

https://github.com/krishpranav/exploitdb

Golang tool to search exploits from exploitdb

database db ethical exploit exploitation exploitdb go golang hacking information license mit mongodb open-source osint sqlite

Last synced: 30 Apr 2026

https://github.com/d1se0/cve-2024-10924-bypass-mfa-wordpress-lab

bypass bypass-mfa bypass-wordpress cibersecurity cve cve-2024-10924 exploit hacking hacking-etico really-simple-security wordpress

Last synced: 03 May 2026

https://github.com/kaisen-bot/pwnkit-helper

🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.

bash ctf ctfs cve-2021-4034 debian ethical-hacking ethical-hacking-tools exploit hack hacking-tools hacks hackthebox linux privilege-escalation pwnkit python tryhackme ubuntu

Last synced: 04 May 2026

https://github.com/p1ckzi/cve-2017-9841

phpunit-shell | CVE_2017-9841

cve-2017-9841 exploit hacking pentesting phpunit phpunit-shell rce

Last synced: 05 May 2026

https://github.com/0x00-0x00/cve-2015-3224

Modification of Metasploit module for RCE in Ruby-On-Rails Console CVE-2015-3224

console cve exploit rails ruby

Last synced: 08 May 2026

https://github.com/m3ssap0/wordpress_cve-2018-6389

Tries to exploit a WordPress vulnerability (CVE-2018-6389) which can be used to cause a Denial of Service.

cve-2018-6389 exploit security security-tools vulnerability vulnerability-scanners wordpress

Last synced: 08 May 2026

https://github.com/threadlinee/metadata-extractor

Metadata Extractor Scans images for any hidden code behind it.

educational educational-purposes exploit github hacking-tool image lua python safe spyware-blocking useful viral

Last synced: 09 May 2026

https://github.com/p1ckzi/nanocmshell

authenticated remote code execution via shell upload.

exploit file-upload nanocms nanocmshell php php-reverse-shell rce

Last synced: 10 May 2026

https://github.com/b1tg/cve-2018-6065-exploit

exploit

Last synced: 10 Jun 2026

https://github.com/unai-d/lliurex-epoptes-exploit

Single Python file that exploits a LliureX's Epoptes vulnerability in order to gain access to any computer.

exploit lliurex vulnerability

Last synced: 12 Jun 2026

https://github.com/mauricelambert/cve-2021-42013

These Nmap, Python and Ruby scripts detects and exploits CVE-2021-42013 with RCE and local file disclosure.

cve cve-2021-42013 detection exploit metasploit nmap python3 rce ruby scanner vulnerability

Last synced: 07 May 2026

https://github.com/codingchili/cve-2020-14368

Interactive RCE exploit demo for Eclipse CHE

eclipse-che exploit proof-of-concept vulnerability

Last synced: 21 Jan 2026

https://github.com/sertrafurr/deltarune-malware-poc

Wanted to make this i was bored

deltarune exploit malware poc undertale undertalemodtool virus

Last synced: 01 Jul 2025

https://github.com/rf-peixoto/rogue

Python RCE & AV Evasion Dropper

dropper exploit malware pentest redteam

Last synced: 08 Oct 2025

https://github.com/ramona-flower/nemotron-infinite-credit

abuse ai api api-abuse chatgpt claude exploit javascript nemotron nvidia openai tampermonkey

Last synced: 15 Apr 2025

https://github.com/anshvaid4/follinatest

Reference of code has been taken from https://github.com/JohnHammond/msdt-follina/blob/main/follina.py. I have given the explanation of the code and made the code a bit simplified.

cve exploit follina

Last synced: 27 Mar 2025

https://github.com/s1lkys/cve-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

concrete5 cve-2021-40101 exploit xss

Last synced: 06 Jan 2026

https://github.com/nxroot/natxploit

Take control of other devices using Reverse NAT Traversal

bypass exploit hacking hacking-tool payload-generator remote-access reverse-shell

Last synced: 26 Jan 2026

https://github.com/chikof/discord-opera

OperaGX really messed up with this one

discord discord-opera educational exploit opera

Last synced: 31 Mar 2025

https://github.com/lucabarile/cve-2022-38604

Exploits and reports for CVE-2022-38604

0-day arbitrary-file-deletion denial-of-service disclosure elevation-of-privilege exploit impersonation link-following link-following-attack local-privilege-escalation mount-point poc proof-of-concept symbolic-link vulnerability wacom wacom-vulnerability windows-denial-of-service write-up zero-day

Last synced: 04 Mar 2026

https://github.com/pandh4cker/pandagik

Image Magick Exploit for CVE-2016–3714

exploit imagemagick python3 rce

Last synced: 28 May 2026

https://github.com/waived/cve-2024-3393

PAN-OS: Firewall Denial-of-Service exploit via malicious DNS query

cve-2024-3393 denial-of-service dns-attack exploit palo-alto-networks pan-os proof-of-concept python3

Last synced: 13 Jul 2025

https://github.com/enty8080/zutto-dekiru

Zutto Dekiru encoder in HatSploit

encoder exploit hacking malware payload penetration-testing pentest python rat remote-control reverse-engineering shellcode virus

Last synced: 20 May 2026

https://github.com/fahmifj/php-8.1.0-dev-zerodium-rce

A script that leverages 'zerodium' backdoor in PHP 8.1.0-dev via User-Agent.

ctf exploit php php-810-dev

Last synced: 12 Mar 2026

https://github.com/evantesecond/simple-aboutblank-blobhttps-datatext-cloakers

about:blank, blob:https, and data:text cloaks

cloak cloaker cloakers cloaking cloaking-utility cloaks exploit school

Last synced: 25 Mar 2025

https://github.com/mar-ket-vector/metamorpheus

A metamorphic shellcode obfuscator capable of generating more unique shellcodes than there are atoms in the OBSERVABLE UNIVERSE and designed for shellcodes/implants that need to run in W^X memory.

av-evasion backdoor c2 code-mutation exploit implant metamorphic obfuscator polymorphic shellcode

Last synced: 13 May 2025

https://github.com/caenjones/codespaces-desktop

Web-based operating system running in Github Codespaces!

bypass codespaces exploit github kasmvnc proxy

Last synced: 29 Apr 2025

https://github.com/usdtc/pdf-fud-exploit

A meticulous scrutiny of the Exploit PDFs innards exposes a network of malevolence, unveiling both the nefarious hyperlink and the URL that precipitates

cve cve-2021-44228 cve-scanning exploit exploit-code exploit-database exploit-development exploit-exercises exploit-kit exploitation exploitation-framework slient-doc-exploit slient-exploit slient-exploit-builder slient-hta-exploit slient-jpg-exploit slient-pdf-exploit slient-png-exploit slient-url-exploit

Last synced: 16 Jun 2025

https://github.com/natthasath/cms-detect-exploit-cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

cms detect exploit joomla wordpress

Last synced: 13 May 2026

https://github.com/og-mason/javascript-memory-exploitation

Exploit :)

arm64 blue-team ethical-hacking exploit explorer forensics hacking-tool incident-response infosec javascript m1-mac oob open-source open-source-security poc privacy-tools python3 red-team shellcode threat-detection

Last synced: 06 May 2026

https://github.com/mertbingol0/pwn-exploits

exploit pwn python script

Last synced: 10 Jun 2026

https://github.com/l4rm4nd/poc-cve-2024-39924

PoC for CVE-2024-39924

authorization-bypass bitwarden-rs ctf cve-2024-39924 docker exploit hacking lab vaultwarden

Last synced: 25 Aug 2025

https://github.com/mauricelambert/pywcgishell

This package implement a WebShell for CGI and WSGI server.

cgi-script exploit pypi-package python3 web-attacks webshell wsgi-server

Last synced: 08 Jun 2026

https://github.com/upcraftlp/upsidedown

Minecraft mod that focuses on the looks of the Minecraft client.

client client-side cosmetic cosmetics exploit exploitation exploits forge forge-mod minecraft minecraft-client minecraft-forge minecraft-mod minecraftforge

Last synced: 07 Apr 2025

https://github.com/devvyyxyz/devvyys-scripts

Roblox exploit scripts by Devvyyxyz

exploit roblox-cheat roblox-executor roblox-hack script

Last synced: 04 Apr 2025

https://github.com/zebbern/exploitdb-extracter

📥 | Extracts and saves dorks in various formats for analysis. Fetches all dorks from Exploit-DB/google-hacking-database!

automation bugbounty cross-platform database developer exploit exploitdb extractor google google-hacking google-hacking-database hacker hacking osint pentesting python python3 script

Last synced: 20 Apr 2026

https://github.com/topac/elements

cheat exploit

Last synced: 09 Nov 2025

https://123tool.github.io/Awesome-Hacker-Search-Engines/

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

awesome awesome-list awesome-lists awesome-readme cyber cyber-security dns exploit hacker hacking hacking-tool hacking-tools osint osint-tool osint-tools tool tools

Last synced: 02 Mar 2026

https://github.com/shamo0/CVE-2022-1388

BIG-IP iControl REST vulnerability CVE-2022-1388 PoC

1388 2022 bash bigip cve cve-2022-1388 exploit f5 icontrol python rest script shell vulnerabilit

Last synced: 10 Mar 2025

https://github.com/l0nax/CVE-2019-15053

(FAB-2019-00156) Vulnerability discoverd by me CVE-2019-15053

cve cve-2019-15053 exploit poc proof-of-concept vulnerability

Last synced: 10 Mar 2025

https://github.com/dubniczky/remote-keylogger

A compiled keylogger written in python with logging to a remote host

exploit hack keylogger python server

Last synced: 31 Mar 2025

https://github.com/momenbasel/naggets

old CTF I've made sharing it publicly.

ctf ctf-challenges ctf-platform ctf-playground cve exploit nagios

Last synced: 03 Aug 2025

https://github.com/z1ph1us/milksad-mnemonic-generator

This tool generates BIP-39 mnemonic phrases derived from Unix timestamps, exploring the 'Milk Sad' vulnerability's implications (CVE-2023-39910)

bip39 bitcoin bitcoin-wallet blockchain bx cryptocurrency cryptography cve-2023-39910 entropy exploit milk-sad mnemonic-generator multi-language security-tool seed-phrase unix-timestamp vulnerability wallet-security

Last synced: 12 Mar 2026

https://github.com/GeorgiiFirsov/CVE-2020-1034

CVE 2020-1034 exploit and presentation

cve cve-2020-1034 education exploit research vulnerability winapi windows

Last synced: 10 Mar 2025

https://github.com/whokilleddb/CVE-2019-17662

Exploit for CVE-2019-17662 (ThinVNC 1.0b1)

cve cve-2019-17662 exploit poc thinvnc

Last synced: 10 Mar 2025

https://github.com/SherlockSec/CVE-2020-0601

A Windows Crypto Exploit

cve cve-2020-0601 exploit windows

Last synced: 10 Mar 2025

https://github.com/mauricelambert/cve-2021-41773

These Metasploit, Nmap, Python and Ruby scripts detects and exploits CVE-2021-41773 with RCE and local file disclosure.

cve cve-2021-41773 detection exploit metasploit nmap python3 rce ruby scanner vulnerability

Last synced: 12 May 2026

https://github.com/dr4xp/pwnkit-helper

For CTF's and Safe Environments.... CVE-2021-4034 Local PrivEsc.

bash ctf ctfs cve-2021-4034 debian ethical-hacking ethical-hacking-tools exploit hack hacking-tools hacks hackthebox linux privilege-escalation pwnkit python python3 tools tryhackme ubuntu

Last synced: 06 May 2026

https://github.com/faisalfs10x/Cisco-CVE-2020-3452-shodan-scanner

simple bash script of CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability checker

cve-2020-3452 exploit poc shodan-dorks

Last synced: 10 May 2025

https://github.com/mauricelambert/shell-exploit-umbraco

This module implements a shell to exploit a RCE in umbraco CMS.

exploit hackthebox python3 rce rce-exploit remote-code-execution shell umbraco umbraco-cms vulnerability web

Last synced: 12 May 2026

https://github.com/arshtepe/jenkins-serialization-vulnerability-exploit

exploit for jenkins

exploit java jenkins

Last synced: 29 Apr 2026

https://github.com/ramona-flower/discord-video-quest-skipper

This script allows you to make video playback on Discord almost instant by speeding up the playback rate by over 19x faster. Ideal for those who want to skip through videos quickly without wasting time, this script ensures your Discord video quests are completed almost immediately!

betterdiscord discord exploit glitch javascript js quest script vencord