#

exploitation

Here are 409 public repositories matching this topic...

sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool

python database detection sql-injection pentesting exploitation sqlmap takeover vulnerability-scanner

Updated Jan 11, 2022
Python

sundowndev / hacker-roadmap

📌 Penetration testing for beginners. A guide for amateur pentesters and a collection of hacking tools, resources and references to practice ethical hacking.

security roadmap hacking penetration-testing pentesting post-exploitation pentest exploitation hacking-tool frameworks information-gathering web-hacking hacktools

Updated Feb 17, 2021

Manisso / fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

python network desktop finder brute-force-attacks post-exploitation exploitation port-scanning information-gathering web-hacking fsociety penetration-testing-framework fsociety-hacking

Updated Nov 2, 2021
Python

RPISEC / MBE

Course materials for Modern Binary Exploitation by RPISEC

ctf wargame exploitation

Updated Dec 9, 2021
C

NullArray / AutoSploit

Open

Vagrant documentation

Ekultek commented Apr 10, 2018

We need Vagrant docs, you can find it here https://github.com/NullArray/AutoSploit/tree/dev-beta/Vagrant

Read more

enhancement help wanted good first issue

Open

README translations

6

commix

commixproject / commix

Automated All-in-One OS Command Injection Exploitation Tool.

python opensource detection pentesting bugbounty exploitation command-injection vulnerability-scanner

Updated Jan 11, 2022
Python

S1ckB0y1337 / Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

windows security attack active-directory hacking cheatsheet enumeration activedirectory penetration-testing cheat pentesting exploitation hacking-tool privilege-escalation cheat-sheet hacking-tools windows-active-directory active-directory-cheatsheet active-directory-exploitation hacking-cheasheet

Updated Jan 2, 2022

S3cur3Th1sSh1t / WinPwn

Sponsor

Automation for internal Windows Penetrationtest / AD-Security

automation powershell pentesting recon exploitation privilege-escalation pentest-tool redteam powersploit adsecurity

Updated Dec 21, 2021
PowerShell

almandin / fuxploider

File upload vulnerability scanner and exploitation tool.

detection python3 pentesting exploitation takeover vulnerability-scanner

Updated Jan 4, 2021
Python

Xyntax / POC-T

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

pentesting exploitation vulnerability-scanner

Updated Sep 24, 2021
Python

swisskyrepo / SSRFmap

Sponsor

Automatic SSRF fuzzer and exploitation tool

vulnerability ctf pentest exploitation hacktoberfest ssrf server-side-request-forgery ssrfmap

Updated Oct 27, 2021
Python

hacksysteam / HackSysExtremeVulnerableDriver

HackSys Extreme Vulnerable Windows Driver

windows kernel driver vulnerabilities exploitation memory-corruption exploit-development hevd

Updated Dec 6, 2021
C

0xInfection / TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

osint enumeration highlight scanning exploitation vulnerability-detection web-penetration-testing intelligence-gathering web-application-security comprehensive-web reconnaissance footprinting vulnerability-analysis comprehensive web-fuzzer scanning-enumeration tidos-framework

Updated Feb 12, 2021
Python

sashs / Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

binary rop exploitation gadget-finder gadgets rop-chains

Updated Jun 15, 2021
Python

neoneggplant / EggShell

iOS/macOS/Linux Remote Administration Tool

macos ios reverse-shell jailbreak exploitation information-security meterpreter pentest-scripts metasploit remote-admin-tool pentest-tool

Updated Mar 25, 2021
Objective-C

husnainfareed / Awesome-Ethical-Hacking-Resources

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

hackers hacking resources owasp penetration-testing exploitation youtube-channel web-hacking vulnerable-applications learning-hacking

Updated Dec 1, 2021

rizin

rizinorg / rizin

Open

Allow to search for symbols/imports/exports with `rz-find`.

XVilka commented Jan 11, 2022

Currently we have only magic, string, binary data search.
It would be useful to be able to search for function calls in the set of binaries.

For example, it could look like this:

rz-find -I printf /usr/bin/ would search for printf() in executable file imports, and skip every non-executable file
rz-find -S blaargh /usr/bin/ would search for the symbol blaargh() in the binary (can

Read more

enhancement good first issue rz-find

Open

MSVC 32bit COFF & demangle issues

Open

Version Information for go binary 1.18

1

Find more good first issues

Integration-IT / Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

windows security powershell active-directory hacking cheatsheet enumeration penetration-testing infosec pentesting exploitation hacking-tool privilege-escalation cheat-sheet hacking-tools windows-active-directory active-directory-cheatsheet active-directory-exploitation hacking-cheasheet

Updated Nov 14, 2020
PowerShell

stong / how-to-exploit-a-double-free

Sponsor

How to exploit a double free vulnerability in 2021. 'Use After Free for Dummies'

tutorial binary pwn heap ctf lock-free walkthrough exploitation microarchitecture use-after-free double-free

Updated Oct 31, 2021
Python

XAttacker

Moham3dRiahi / XAttacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

wordpress video drupal exploit scanner hacking joomla prestashop pentest exploitation vulnerability-detection hacking-tool security-scanner vulnerability-assessment lokomedia security-tools vulnerability-scanner vulnerability-exploit website-vulnerability-scanner wp-scanner auto-exploiter

Updated Dec 19, 2021
Perl

Hack-with-Github / Windows

Awesome tools to exploit Windows !

powershell exploitation powershell-script windows-hacking windows-machine exploiting-windows post-exploitation-powershell powershell-payload

Updated Oct 25, 2016

AlisamTechnology / ATSCAN

Advanced dork Search & Mass Exploit Scanner

Updated Sep 4, 2021
Perl

nccgroup / featherduster

Open

Invalid method

1

Ttech commented Apr 7, 2018

There appears to be a broken method in hash extend that is not valid due to it missing a def ():
In addition to this, there appears to be no body for the method.

https://github.com/nccgroup/featherduster/blob/52ed10dc441c45649ce4f4bedbf59bb72c63cda8/feathermodules/hash/hash_extend.py#L11

Read more

bug good first issue

Open

Add recognition and decoding of websafe base64 to analysis engine

1

Open

Show key being used by 'multi_byte_xor'

1

Find more good first issues

BinExp

r0hi7 / BinExp

Linux Binary Exploitation

linux tutorial binaries stackoverflow buffer-overflow-attack vulnerabilities exploitation consolidation bufferoverflow heap-exploitation format-string-attack ret2libc shellcode-injector return-to-libc global-offset-table overriding-got got-spawning-shell

Updated Jun 15, 2021
C

Damn-Vulnerable-GraphQL-Application

dolevf / Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

graphql security penetration-testing vulnerability exploitation graphql-security damn-vulnerable damn-vulnerable-web-application

Updated Dec 25, 2021
JavaScript

utkusen / leviathan

wide range mass audit toolkit

python service-discovery brute-force sql-injection exploitation port-scanning

Updated Oct 3, 2018
Python

0xricksanchez / paper_collection

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

linux iot embedded kernel paper linux-kernel fuzzing exploitation vulnerability-detection mitigations rca sanitizer directed-fuzzing hybrid-fuzzing fuzzing-binaries guided-fuzzing root-cause

Updated Jan 1, 2022

merrychap / shellen

🌸 Interactive shellcoding environment to easily craft shellcodes

Updated Feb 26, 2021
Python

jxy-s / herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

windows security exploit windows-10 exploits vulnerability antivirus security-vulnerability exploitation windows-7 antivirus-evasion process-hollowing windows-defender exploit-development process-doppelganging exploit-framework process-migration process-herpaderping

Updated Jan 10, 2022
C++

bkerler / exploit_me

Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 14 vulnerability techniques)

arm tutorial ctf rop exploitation

Updated Sep 30, 2020
C++

Improve this page

Add a description, image, and links to the exploitation topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the exploitation topic, visit your repo's landing page and select "manage topics."