Automated Mass Exploiter
- metasploit
- python
- exploit
- exploitation
Repository Index
79,350 visible repositories in the index
49–72 of 285 · Most stars
A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)
- phone-number
- signal
- tracking
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
Windows Exploit Suggester - Next Generation
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
📦 Make security testing of K8s, Docker, and Containerd easier.
- penetration
- penetration-testing-tools
- kubernetes
- docker
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes
- express-jwt
- jwt
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
- weblogic
- tomcat
- exploit
- poc
TranslatedKscan is an all-round scanner developed purely in Go, with features such as port scanning, protocol detection, fingerprint recognition, and brute-force cracking. It supports 1,200+ protocols, 10,000+ protocol fingerprints, 20,000+ application fingerprints, and more than 10 brute-force cracking protocols.
- redteam
- scanner
- bruteforce
- brute-force
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
Decrypted content of eqgrp-auction-file.tar.xz
- exploits
- shadowbrokers
- equationgroup
- hacking
UNIX-like reverse engineering framework and command-line toolset.
- reverse-engineering
- program-analysis
- security
- exploitation
A tool to dump the login password from the current linux user
- post-exploitation
- password-extraction
OAuth Proxy
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
- nextjs
- authentication
- session
- stateless
An experiment.
- rust
- cryptography
- security
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
Complete, compliant and well tested module for implementing an OAuth2 Server/Provider with express in node.js
- oauth2-server
Firmware patcher for Xiaomi routers
- xiaomi
- router
- exploit
- installer
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification