Alternatives and similar repositories for exploits

Users that are interested in exploits are comparing it to the libraries listed below

• initstring / dirty_sock
  Linux privilege escalation exploit via snapd (CVE-2019-7304)
  ☆677Updated 6 years ago
• kacperszurek / exploits
  ☆266Updated 6 years ago
• Rhynorater / CVE-2018-15473-Exploit
  Exploit written in Python for CVE-2018-15473 with threading and export formats
  ☆530Updated last year
• projectzeroindia / CVE-2019-11510
  Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
  ☆363Updated 5 years ago
• Bo0oM / PHP_imap_open_exploit
  Bypassing disabled exec functions in PHP (c) CRLF
  ☆404Updated 5 years ago
• nongiach / sudo_inject
  [Linux] Two Privilege Escalation techniques abusing sudo token
  ☆719Updated 6 years ago
• Metnew / uxss-db
  🔪Browser logic vulnerabilities
  ☆697Updated 4 years ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆580Updated 4 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆590Updated 4 years ago
• veracode-research / solr-injection
  Apache Solr Injection Research
  ☆577Updated 5 years ago
• nccgroup / BurpSuiteHTTPSmuggler
  A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
  ☆732Updated 6 years ago
• smgorelik / Windows-RCE-exploits
  The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samp…
  ☆743Updated last year
• orangetw / awesome-jenkins-rce-2019
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆605Updated 6 years ago
• opsxcq / exploit-CVE-2017-7494
  SambaCry exploit and vulnerable container (CVE-2017-7494)
  ☆382Updated 2 years ago
• jas502n / CVE-2019-13272
  Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
  ☆327Updated 6 years ago
• dreadlocked / Drupalgeddon2
  Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
  ☆589Updated 4 years ago
• weev3 / LKWA
  Lesser Known Web Attack Lab
  ☆331Updated 5 years ago
• orangetw / Tiny-URL-Fuzzer
  A tiny and cute URL fuzzer
  ☆399Updated 2 years ago
• dustyfresh / PHP-vulnerability-audit-cheatsheet
  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…
  ☆356Updated 7 months ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆444Updated 5 years ago
• algo7 / bluekeep_CVE-2019-0708_poc_to_exploit
  An Attempt to Port BlueKeep PoC from @Ekultek to actual exploits
  ☆346Updated 4 years ago
• PortSwigger / collaborator-everywhere
  A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by caus…
  ☆438Updated 6 months ago
• cyberheartmi9 / CVE-2017-12617
  Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
  ☆393Updated 8 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆424Updated 5 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆490Updated last year
• kozmic / laravel-poc-CVE-2018-15133
  PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
  ☆253Updated last year
• mazen160 / struts-pwn_CVE-2018-11776
  An exploit for Apache Struts CVE-2018-11776
  ☆302Updated 7 years ago
• FSecureLABS / dref
  DNS Rebinding Exploitation Framework
  ☆493Updated 4 years ago
• 0xeb-bp / bluekeep
  Public work for CVE-2019-0708
  ☆292Updated 5 years ago
• 0xacb / viewgen
  Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  ☆649Updated 8 months ago