Exploitation Framework for Embedded Devices

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Decrypted content of eqgrp-auction-file.tar.xz

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Linux privilege escalation auditing tool

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

A list of resources in different fields of Computer Science (multiple languages)

Miscellaneous exploit code

Find exploits in local and online databases instantly

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo

A Ruby framework designed to aid in the penetration testing of WordPress systems.

The Correlated CVE Vulnerability And Threat Intelligence Database API

Find exploit tool

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

🌴Windows Kernel提权漏洞合集，附带编译环境，演示GIF图，漏洞详细信息，可执行文件

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

kernel privilege escalation enumeration and exploitation framework

RouterOS Security Research Tooling and Proof of Concepts

A collection of curated Java Deserialization Exploits

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

for mass exploiting

A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.

EternalRocks worm

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

A handy collection of my public exploits, all in one place.

This repository contains my advisories, proof of concept files and exploits that I have made public.

Vulners Python API wrapper