CTF challenge (mostly pwn) files, scripts etc
Repository Index
79,350 visible repositories in the index
121–144 of 285 · Most stars
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
- cms
- content-management-system
- cms-framework
- wordpress
Source 2 Viewer is an all-in-one tool to browse VPK archives, view, extract, and decompile Source 2 assets, including maps, models, materials, textures, sounds, and more.
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
- brute-force-attacks
- bruteforce
- credential-testing
- cybersecurity
PlayStation 2 DVD Player Exploit
RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs.
- tv
- webos
- exploit
- cve-2022-23727
红队作战中比较常遇到的一些重点系统漏洞整理。
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
- exploit
- exploiting-vulnerabilities
- deserialization
- javadeser
The repository host gives no description.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
各种漏洞poc、Exp的收集或编写
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
- sudo-exploitation
- abuse-sudo
- ctf
- exploits
An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
- ai-agents
- ai-security
- bug-bounty
- claude-code
Social networking platform with automated content moderation and context-based authentication system
An evil RAT (Remote Administration Tool) for macOS / OS X.
- rat
- reverse-shell
- macos
- macosx
This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)
- authentication
- rest
- social-login
- django
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
- poc
- vulnerability-scanner
- poc-bomber
- cve
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
The best tool for finding one gadget RCE in libc.so.6
- ctf
- pwnable
- pwn
- glibc
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
- spring
- spring-boot
- spring-vulnerability
- springboot
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php