exploits

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

Exploitation Framework for Embedded Devices

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Linux privilege escalation auditing tool

📦 Make security testing of K8s, Docker, and Containerd easier.

Decrypted content of eqgrp-auction-file.tar.xz

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

A list of resources in different fields of Computer Science

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

Find exploits in local and online databases instantly

Miscellaneous exploit code

OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure

Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆项目，获取Nuclei POC，并将POC按类别分类存放，使用 Action实现。已有19w+POC，已校验格式的有效性并去重（验证的是格式的有效性）

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python