236 Open Source Exploitation Software Projects

Automatic SQL injection and database takeover tool

fsociety Hacking Tools Pack – A Penetration Testing Framework

Automated Mass Exploiter

Course materials for Modern Binary Exploitation by RPISEC

:pushpin: Penetration testing for beginners. A guide for amateur pentesters and a collection of hacking tools, resources and references to practice ethical hacking.

Automated All-in-One OS Command Injection Exploitation Tool.

File upload vulnerability scanner and exploitation tool.

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

iOS/macOS/Linux Remote Administration Tool

Automatic SSRF fuzzer and exploitation tool

The Offensive Manual Web Application Penetration Testing Framework.

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

wide range mass audit toolkit

Automation for internal Windows Penetrationtest / AD-Security

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes

Awesome tools to exploit Windows !

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.

Advanced dork Search & Mass Exploit Scanner

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A collection where my current and future writeups for exploits/CTF will go

Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 14 vulnerability techniques)

Linux Binary Exploitation

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

An IDA Pro plugin to examine the glibc heap, focused on exploit development

Attify OS - Distro for pentesting IoT devices

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

mXtract - Memory Extractor & Analyzer

Notes for taking the OSCP in 2097. Read in book form on GitBook

Subaru StarLink persistent root code execution.

fireELF - Fileless Linux Malware Framework

A collection of pwn/CTF related utilities for Ghidra

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

Medfusion 4000 security research & a MQX RCE.

Linux Heap Exploitation Practice

A container analysis and exploitation tool for pentesters and engineers.

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

MS17-010: Python and Meterpreter

CMS auto detect and exploit.

A script that automates generation of OpenSSL reverse shells

Android application fuzzing framework with fuzzers and crash monitor.

Sifter is a OSINT, recon & vulnerability scanner. It incorporates a plethara of tools within different module sets that tries to cover every attack vector. Allowing you to quickly perform recon tasks and organize the results in one place. From OSINT to Recon, Exploitation, Post-Exploitation, OpSec, Threat Analysis, XSS, SQLinjection, Network Scanning, WebApp Analysis or DNS enumeration.. Sifter should be able to cover it all.

Data Visualization Plugin for IDA Pro

AndroRAT | Remote Administrator Tool for Android OS Hacking

Android Kernel Exploitation

A set of tutorials about code injection for Windows.

mirror of gera's insecure programming examples | http://community.coresecurity.com/~gera/InsecureProgramming/

Linux and Windows shellcode enrichment utility

A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

A thorough library database to assist with binary exploitation tasks.

GUI tool to create ROP chains using the ropper API

Research on Anti-malware and other related security solutions

Bash script purposed for system enumeration, vulnerability identification and privilege escalation.

Exploitation on ARM-based Systems (Troopers18)

Blazefox exploits for Windows 10 RS5 64-bit.

Exploitation Framework for ATtiny85 Based HID Attacks

Tool to help exploit XXE vulnerabilities

Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

EmpireCTF – write-ups, capture the flag, cybersecurity

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

How to prepare for OSCP complete guide

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

Exploiting challenges in Linux and Windows

Offensive Software Exploitation Course

This Repository contains the stuff related to windows Active directory environment exploitation

PAKURI has been merged with Python and launched as a new project, PAKURI-THON.

Extension for GDB

My solutions to some CTF challenges and a list of interesting resources about pwning stuff

Bilingual PhishingKit. TigerShark intergrates some of the best (in my opinion), phishing tools and frameworks of various languages in order to suit whatever your deployment needs may be.

An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit

Tools for BugHunting

🔐 Run frida-server on boot with Magisk, always up-to-date

v1ew-s0urce a recon tool built by the 5/9Dark team.

Responsive Command and Control System

Reverse-engineering tools and exploits for Samsung's implementation of TrustZone

Collection of resources for my preparation to take the OSEE certification.

Arm Episodes

Exploitation and Mitigation Slides

Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit

Blind Attacking Framework

Borrowed Instructions Synthetic Computation

Security Evaluation of Dynamic Binary Instrumentation Engines

A website for interacting with kahoot games.

dr.rer.oec.gadget IDAPython plugin for the Interactive Disassembler <ABANDONED PROJECT>

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

A collection of useful links for Pentesters

Good to know, easy to forget information about binaries and their exploitation!

Kernel exploits for the Oculus Quest

Challenges and vulnerabilities exploitation.

Contextual Bandits in R - simulation and evaluation of Multi-Armed Bandit Policies

RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, documented code base being worked on in: core branch)