Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Exploit

Exploit refers to a piece of code or technique that takes advantage of a security vulnerability in a system, application, or network to cause unintended behavior. Exploits can be used by attackers to gain unauthorized access, escalate privileges, execute arbitrary code, or cause a denial of service. This topic covers the various types of exploits, such as zero-day exploits, remote code execution, and privilege escalation. It also explores the lifecycle of an exploit, from discovery and development to deployment and mitigation, and highlights the importance of vulnerability management and patching in preventing exploits.

https://github.com/krishpranav/autosploit

A simple ruby tool to automate metasploit modules

bash exploit exploiter metasploit metasploit-modules msfs ruby shell

Last synced: 15 Apr 2025

https://github.com/paulveillard/cybersecurity-hack-value

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Hack Value in Cybersecurity.

cybersecurity exploit exploits-finder exploits-scripts hacking hacking-code hacking-framework hacking-tools security-tools vulnerability vulnerability-assessment vulnerability-detection vulnerability-scanners

Last synced: 08 Jan 2026

https://github.com/helidem/cve-2025-24054-poc

Proof of Concept for the NTLM Hash Leak via .library-ms CVE-2025-24054

cve cve-2025-24054 cve-2025-24071 exploit library-ms ntlm ntlm-hash phishing poc windows

Last synced: 25 Apr 2025

https://github.com/volkansah/sqlp-edu

Example Python script that demonstrates a simple example of a Cross-Site Scripting (XSS) exploit for educational purposes only. This script is intended to be used responsibly, for learning and understanding the security implications of XSS attacks, and should not be used for any illegal or unethical activities.

bypass cross-site-scripting ehtical-hacking-tools exploit exploitation explotation hacking hacking-tool hacking-tools penetration-testing pentesting phishing python security sql-xss vulnerability xss xss-attacks xss-exploitation xss-injection

Last synced: 11 Jul 2025

https://github.com/kennytv/exploitfixes

Fixes a recently found tab complete server crash (fixed in Paper 1.20.4). May be used for more in the future

crash exploit fix minecraft paper

Last synced: 05 Mar 2025

https://github.com/loneicewolf/vulnserver-bof

My approach to the VulnServer BOF (Windows 10 - SYSTEM gained)

exploit loneicewolf oscp oscp-prep oscp-tools vulnserver william-martens

Last synced: 09 Apr 2025

https://github.com/idiidk/apeslapslion

A poc WebKit exploit for older devices based on the Phoenhex team exploit.

1131 exploit ios poc safari webkit

Last synced: 24 Dec 2025

https://github.com/randomrobbiebf/cve-2024-22145

InstaWP Connect <= 0.1.0.8 - Missing Authorization to Arbitrary Options Update (Subscriber+)

cve-2024-22145 exploit instawp-connect wordpress

Last synced: 08 Oct 2025

https://github.com/totekuh/shellcrafter

Scripts, tools and code snippets for exploit development/assembly/shellcoding

assembly exploit exploit-development keystone pip python3 shellcode

Last synced: 15 Apr 2025

https://github.com/xewdy444/netgrave

A tool for retrieving login credentials from Netwave IP cameras using a memory dump vulnerability (CVE-2018-17240)

camera exploit netwave security vulnerability

Last synced: 19 Apr 2025

https://github.com/mr-r0ot/exploitchrome

An exploit that uses the vulnerabilities and vulnerabilities in the Chrome browser to acquires Password and browser experiences.

chrome-exploit chrome-vulnerability exploit vulnerability

Last synced: 12 Jun 2025

https://github.com/samkg/flush-reload-sidechannel

A demonstration of a sidechannel vulnerability that exploits cache timings using Flush Reload to communicate information over a covert channel

covert-channel exploit intel linux

Last synced: 13 Apr 2025

https://github.com/epsylon/x11-stack-corruption

X11/libX11.so.6 (XQueryKeymap) Stack corruption/Access violation [PoC+ Fuzzer]

exploit fuzzer poc

Last synced: 04 Aug 2025

https://github.com/0xtas/cve-2012-2982

An exploit for CVE-2012-2982 implemented in Rust

cve-2012-2982 exploit poc rust tryhackme

Last synced: 28 Feb 2025

https://github.com/retr0kr0dy/malloc-bomb

Presenting the latest Linux bomb exploit: not a fork but a malloc-based threat. Delve into the intricacies of this novel vulnerability.

coding cybersecurity denial-of-service dos exploit forkbomb hacking infosec linux malloc pentesting security system-exploitation vulnerability

Last synced: 23 Sep 2025

https://github.com/hunthubspace/exploit-tracker

A script designed to automatically discover new exploits and save results to a file or integrate with your Discord server. Also search for exploits related to specific CVEs of your choice.

bugbounty cve ethical-hacking exploit penetration-testing-tools web

Last synced: 15 Oct 2025

https://github.com/arpsyndicate/bdu-scores

Бесплатный рейтинг трендовых БДУ уязвимостей по версии VEDAS

bdu exploit vedas vulnerability

Last synced: 27 Jun 2025

https://github.com/hktalent/createoneminjar

Automatically search for the required class and package it as a jar Create One Min Jar file

0-day 0day build deserialize exp exploit jar java rce tools

Last synced: 14 May 2025

https://github.com/xeloxa/xeloxa

Hello 🥷🏿, I'm XELOXA (Ali Sünbül)

cyber cybersecurity exploit penetration-testing pentesting python redteam vulnerability

Last synced: 05 Apr 2025

https://github.com/bstrdlord/mirai-sucks

stop using mirai botnet. better use zig boatnet

boatnet botnet ddos exploit malware mirai qbot shitcode

Last synced: 24 Apr 2025

https://github.com/nguyenmg/roblox-synapse

Roblox Synapse Executor is a top-tier script execution tool for Roblox, valued for its advanced features and stability, enabling seamless Lua scripting for game modifications and customization.

bloxfruit-script bloxfruits-autofarm-script bloxfruits-hack-script bloxfruits-script exploit gui lua roblox roblox-lua roblox-script roblox-scripts roblox-synapse robloxscript robloxscripts

Last synced: 09 Apr 2025

https://github.com/aryanslayerrr/miner-automation

A miner that works on a vulrenability of a website

crypto exploit mining monero python xmrig

Last synced: 25 Apr 2025

https://github.com/techgaun/exploit-db-search

Search exploit database

exploit offensive-security shell

Last synced: 07 Oct 2025

https://github.com/acceis/exploit-cve-2022-0482

Easy!Appointments < 1.4.3 - Unauthenticated PII (events) disclosure

cve cve-2022-0482 disclosure exploit pii

Last synced: 08 Apr 2025

https://github.com/rsrdesarrollo/auto-ysoserial

Generate all ysoserial payloads with burp collaborator (or similar)

burp burpsuite exploit java python security security-tools ysoserial

Last synced: 08 Oct 2025

https://github.com/institute-atri/wastrap

🐋 Web exploration tool focused on the WordPress application. 🐋

exploit golang scan scanner vulnerabilities wastrap wordpress

Last synced: 14 Jan 2026

https://github.com/lucadibello/weaponizedping

🔫 A weaponized ping implementation that includes concealed data in the packet payload.

exploit icmp-tunnel ping pinger python3

Last synced: 09 Oct 2025

https://github.com/kube-tarian/kubetak

KubeTaK - Kube Attack. Exploit your K8s cluster and workloads running in it. PenTest K8s. Inspired by the concept of kubesploit by CyberArk and StackHawk.

application-bug application-security bug-fixing exploit kubernetes-attack kubernetes-exploiting penetration-testing pentest pentest-tool pentesting

Last synced: 28 Oct 2025

https://github.com/fssay/dall-e

Free DALL-E text-to-image generator using exploit in a third-party service

ai dall-e dalle exploit rust-lang tauri text-to-image

Last synced: 28 Mar 2025

https://github.com/jsmoreira02/sar2html_exploit

Exploit the Sar2HTML RCE vulnerability and also perform a Shell Upload on the target

cybersecurity exploit hacking python3 reverse-shell vulnerability web-exploitation

Last synced: 09 Jul 2025

https://github.com/FOGSEC/isf

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

control exploit framework ics ics-security industrial python systems

Last synced: 10 Mar 2025

https://github.com/cyn-ically/thefall.io-infinite-money

Little api abuse found inside the Aywen's game

api api-abuse aywen exploit glitch infinite javascript money tampermonkey

Last synced: 11 Jun 2025

https://github.com/sertrafurr/thefall.io-infinite-money

Little api abuse found inside the Aywen's game

api api-abuse aywen exploit glitch infinite javascript money tampermonkey

Last synced: 30 Jun 2025

https://github.com/ebrasha/cve-2024-28000

LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000

abdal cve-2024-28000 ebrasha exploit litespeed-cache-privilege poc privilege-escalation-poc wordpress

Last synced: 15 Sep 2025

https://github.com/Acceis/exploit-CVE-2022-0482

Easy!Appointments < 1.4.3 - Unauthenticated PII (events) disclosure

cve cve-2022-0482 disclosure exploit pii

Last synced: 10 Mar 2025

https://github.com/codeb0ss/cve-2023-20073-

Mass Exploit - CVE-2023-20073 - Cisco VPN Routers - [Unauthenticated Arbitrary File Upload and Stored XSS]

0day bug bugbounty cisco codeb0ss codeboss cve cve-2023-20073 exploit hackerone mass mass-exploit uncodeboss vpn-router

Last synced: 10 Sep 2025

https://github.com/cleilsonandrade/loader-pppwn

PPPwn é um exploit de execução remota de código do kernel para PlayStation 4 até a Firmware 11.00. Baseado na POC compartilhada pelo usuário TheOfficialFloW, foi desenvolvido um script para automação de execução.

backend bash-script exploit pppwn python scapy-library shell-script

Last synced: 23 Apr 2025

https://github.com/sertrafurr/get-discord-guild-tag-method

New method to get it at 100% without any bots/selfbots

clan discord discord-tag exploit guild method tag

Last synced: 01 Jul 2025

https://github.com/richardschwabe/chankro3

Exploit mail function in php when admin disabled other functions like shell. Uses LD_PRELOAD

cyber cyber-security exploit pentest-scripts pentesting pentesting-tools php php-exploit

Last synced: 03 Apr 2025

https://github.com/demining/defi-attacks

DeFi Attacks & Exploits all the biggest cryptocurrency thefts from 2021 to 2022

attack attacks attacks-threats-vulnerabilites bitcoin bitcoin-wallet blockchain defi defichain ethereum exploit exploits

Last synced: 03 May 2025

https://github.com/monke443/cve-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

cve cve-2023-40028 exploit ghost-cms github pentesting security vulnerability

Last synced: 07 May 2025

https://github.com/rcvalle/exploits

Exploits written.

exploit exploits

Last synced: 16 Mar 2025

https://github.com/onuratakan/haimgard

Haimgard is an environment for writing, testing and using exploit code.

cybersecurity environment exploit hacking hacktool module modules python3 testing whitehat

Last synced: 23 Apr 2025

https://github.com/voidsec/virit-explorer-lpe-arbitrary-code-execution

VirIT Explorer v.8.1.68 Local Privilege Escalation (System)/Arbitrary Code Execution

exploit lpe virit-explorer

Last synced: 17 Mar 2025

https://github.com/shafdo/proftpd-1.3.3c-backdoor_command_execution_automated_script

A script to interact with the ProFTPD-1.3.3c inbuilt backdoor

exploit penetration-testing pentesting

Last synced: 13 Apr 2025

https://github.com/riz4d/scaneye

ScanEye designed to scan a range of IP addresses to detect security surveillance cameras that are streaming video over HTTP or RTSP. The tool sends HTTP requests to each IP address in the specified range and checks for active HTTP services and potential video streams.

cctv-detection exploit ipcamera python rtsp

Last synced: 23 Apr 2025

https://github.com/4m3rr0r/cve-2011-2523-poc

Python exploit for CVE-2011-2523 (VSFTPD 2.3.4 Backdoor Command Execution)

cve cve-2011-2523 exploit python security vsftpd-exploit

Last synced: 19 Apr 2025

https://github.com/andreiglesias/snow-crash

Cybersecurity challenge series to develop skills in penetration testing, reverse engineering, and exploit development.

ctf ctf-writeups cybersecurity exploit pentesting reverse-engineering

Last synced: 07 May 2025

https://github.com/dubniczky/kernel-exploits

Kernel exploits consisting mostly of privilege escalation attacks against core components of Linux distribtions

cve exploit linux linux-exploits linux-kernel

Last synced: 31 Mar 2025

https://github.com/masasron/chameleondump

Dump RFID tag IDs from ChameleonUltra devices

ble chameleonultra exploit

Last synced: 14 Jul 2025

https://github.com/trigii/cve-2023-42860

Exploit for CVE-2023-42860

apple exploit fda macos root sip tcc

Last synced: 15 Jun 2025

https://github.com/randomrobbiebf/cve-2023-0630

CVE-2023-0630 - Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection

cve-2023-0630 exploit wordpress wordpress-plugin

Last synced: 13 Apr 2025

https://github.com/arpsyndicate/euvd-scores

VEDAS Score Aggregator for EUVDs

euvd exploit exploit-maturity vedas vulnerability

Last synced: 28 Oct 2025

https://github.com/randomrobbiebf/cve-2024-0679

ColorMag <= 3.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation

cve-2024-0679 exploit wordpress

Last synced: 29 Dec 2025

https://github.com/gill-singh-a/docker-api-remote-root-shell-exploit

A Simple Python Program that uses Docker Module to communicate with Docker API and gets a Remote Root Shell on the Target Device

docker exploit python ssh

Last synced: 05 Jul 2025

https://github.com/sleepytariq/php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev User-Agentt Backdoor Exploit

exploit php python3

Last synced: 08 Jul 2025

https://github.com/p1ckzi/cve-2022-35513

CVE-2022-35513 | blink1-pass-decrypt

blink1-pass-decrypt blink1control2 cve cve-2022-35513 exploit

Last synced: 25 Mar 2025

https://github.com/codeb0ss/cve-2024-1698-poc

Mass Exploit CVE-2024-1698 - Wordpress NotificationX <= 2.8.2 - SQL Injection

codeb0ss codeboss cve-2024 cve-2024-1698 cve-2024-1698-exp cve-2024-1698-poc exploit wordpress

Last synced: 03 May 2025

https://github.com/xerosic/leidenfrost

Local privilege escalation on Windows by abusing CMSTP to bypass User Access Control (UAC)

exploit lpe privilege-escalation uac uac-bypass windows

Last synced: 11 May 2025

https://github.com/m3hu1/speedtyperexploit

speedtyper.dev exploit written in python

exploit

Last synced: 07 Oct 2025

https://github.com/hunthubspace/cve-2024-3105-poc

A PoC Exploit for CVE-2024-3105 - The Woody code snippets – Insert Header Footer Code, AdSense Ads plugin for WordPress Remote Code Execution (RCE)

bugbounty cve cve-2024-3105 ethical-hacking exploit penetration-testing web

Last synced: 26 Mar 2025

https://github.com/lynk4/cve-2011-2523

Python exploit for vsftpd 2.3.4 - Backdoor Command Execution

cve cve-2011-2523 exploit metasploitable metasploitable-2 metasploitable-3 python vsftpd-exploit

Last synced: 21 Feb 2025

https://github.com/unicordev/exploit-cve-2025-29927

Exploit for CVE-2025-29927 (Next.js) - Authorization Bypass

authorization bypass exploit middleware nextjs python python3

Last synced: 15 Apr 2025

https://github.com/muhammadwaseem29/cve-2025-1661

HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion (LFI)

bugbounty cve-2025-1661 cyber-security exploit

Last synced: 11 Jan 2026

https://github.com/loudyyyyy/scriptware

Scriptware is a powerful scripting tool that streamlines the process of writing and executing scripts in various programming languages. It offers a user-friendly interface and advanced features for improved code efficiency.

backup borgbackup delayless exploit fe fluxus hack http krnl lua netbypass netless reanimate rest-api roblox rust script scriptware synapse tauri

Last synced: 28 Mar 2025

https://github.com/ytisf/snmplicity

the Swiss Army Knife of the SNMP world, but, it's coded in Python, not made of stainless steel!

cisco code-execution exploit redteam-tools redteaming snmp

Last synced: 15 Oct 2025

https://github.com/arpsyndicate/cnnvd-scores

适用于 CNNVD 的 VEDAS 分数聚合器

cnnvd exploit vedas vulnerability

Last synced: 26 Jun 2025

https://github.com/m3ssap0/wordpress_cve-2018-6389

Tries to exploit a WordPress vulnerability (CVE-2018-6389) which can be used to cause a Denial of Service.

cve-2018-6389 exploit security security-tools vulnerability vulnerability-scanners wordpress

Last synced: 02 Mar 2025

https://github.com/kaanaryoverflow/ipfire-2-25-auth-rce

ipfire 2.25 authenticated remote code execution

exploit ipfire rce

Last synced: 19 Oct 2025

https://github.com/0x00-0x00/cve-2015-3224

Modification of Metasploit module for RCE in Ruby-On-Rails Console CVE-2015-3224

console cve exploit rails ruby

Last synced: 25 Aug 2025

Exploit Awesome Lists
Awesome-Hacking-Resources 261 awesome-hacker-search-engines 545 bluetoolkit 69 awesome-mcp-security 119 awesome-vm-exploit 35 awesome-MLSecOps 190 awesome-uefi-security 233 awesome-cryptocurrency-security 50 awesome-iot-security-resource 204
Exploit Categories
Uncategorized 679 Table of Contents 306 Threat Modeling 292 Vulnerability Writeup 255 Blogs 213 Blogs :newspaper: 65 Talks :speaker: 60 Install 59 MlSecOps pipeline 58 Open Source Security Tools 57 📕 Articles, X threads and Blog Posts 52 TODO List 50 Tools :hammer: 38 Qemu 37 Repositories 34 Firmware 26 🧑‍🚀 Tools and code 25 Community Resources 24 💾 MCP Security Servers 20 Blogs and Publications 20