Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.
☆86Oct 18, 2026Updated this week
Alternatives and similar repositories for Exploit-Index
Users that are interested in Exploit-Index are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A structured archive of Proof-of-Concept security research, organized by category with metadata, reproduction steps, and references.☆38Updated this week
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆54Sep 25, 2026Updated 3 weeks ago
- Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)☆59Aug 10, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆80Updated this week
- A x64 binary packer written in Rust.☆33Jul 30, 2026Updated 2 months ago
- Headless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, lib…☆25Updated this week
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated 3 weeks ago
- Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed expos…☆64Sep 11, 2026Updated last month
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆58Jul 20, 2026Updated 2 months ago
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆83Sep 10, 2026Updated last month
- Token Analysis and Tracking System☆45Aug 25, 2026Updated last month
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆28Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM,…☆85Sep 16, 2026Updated last month
- AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assess…☆64Updated this week
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- ENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations☆36Oct 6, 2026Updated last week
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆109Sep 25, 2026Updated 3 weeks ago
- Portable passive hostname reconnaissance through Shodan CTL☆40Sep 5, 2026Updated last month
- LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.☆63Updated this week
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- IP obfuscation and URL generator.☆48Dec 8, 2025Updated 10 months ago
- Research code for the paper "The Trigger in the Haystack: Extracting and Reconstructing LLM Backdoor Triggers" https://arxiv.org/abs/2602…☆39Mar 26, 2026Updated 6 months ago
- AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD…☆215Sep 25, 2026Updated 3 weeks ago
- SSH、WinRM、SFTP、Docker、数据库与 AI 的一体化终端工作台☆61Updated this week
- ☆34Aug 6, 2026Updated 2 months ago
- GhostWave aka "P7 DarkSword" RCE☆83Updated this week
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆45Aug 1, 2026Updated 2 months ago
- A fast web crawler for gathering URLs, JavaScript files, and hidden parameters.☆41May 28, 2026Updated 4 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆59Jul 24, 2026Updated 2 months ago
- ☆95Jul 24, 2026Updated 2 months ago
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆69Sep 17, 2026Updated last month
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆62Jul 22, 2026Updated 2 months ago
- Mythic C2 MSTeams Communication Channel☆39Sep 13, 2026Updated last month
- Group3r but in Python☆64Oct 11, 2026Updated last week
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month