exploits

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

Exploitation Framework for Embedded Devices

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Linux privilege escalation auditing tool

📦 Make security testing of K8s, Docker, and Containerd easier.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Collection of resources spanning key areas of Computer Science

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

Repository for information about 0-days exploited in-the-wild.

Advisories, proof of concept files and exploits that have been made public by @pedrib.

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。

A handy collection of my public exploits, all in one place.

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

RomBuster is a router exploitation tool that allows to disclosure network router admin password.