mm0r1 / exploits
Pwn stuff.
☆1,767Updated 2 years ago
Alternatives and similar repositories for exploits:
Users that are interested in exploits are comparing it to the libraries listed below
- This tool generates gopher link for exploiting SSRF and gaining RCE in various servers☆3,010Updated last year
- HackBar plugin for Burpsuite☆1,563Updated 3 years ago
- PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.☆3,408Updated this week
- 🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.☆1,501Updated 2 months ago
- Rip web accessible (distributed) version control systems: SVN/GIT/HG...☆1,721Updated 8 months ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆3,897Updated 11 months ago
- Redis(<=5.0.5) RCE☆1,038Updated last year
- generate CobaltStrike's cross-platform payload☆2,370Updated last year
- Code-Audit-Challenges☆980Updated 6 years ago
- Redis 4.x/5.x RCE☆950Updated 3 years ago
- bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)☆1,149Updated 3 years ago
- weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-201…☆2,032Updated last year
- A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.☆1,615Updated last year
- SSRF (Server Side Request Forgery) testing resources☆2,394Updated 5 months ago
- Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.☆1,025Updated 5 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,126Updated last month
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,610Updated 3 months ago
- Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability detai…☆2,976Updated 2 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,189Updated last year
- Webshell && Backdoor Collection☆1,874Updated 4 years ago
- A modern multiple reverse shell sessions manager written in go☆1,572Updated last week
- Venom - A Multi-hop Proxy for Penetration Testers☆2,059Updated 2 years ago
- Neo-reGeorg is a project that seeks to aggressively refactor reGeorg☆3,024Updated last month
- A collection of pentest and development tips☆1,106Updated 2 years ago
- Next-Generation Linux Kernel Exploit Suggester☆1,893Updated 2 years ago
- MySQL fake server for read files of connected clients☆592Updated 7 years ago
- Proof-of-Concept exploits for CVEs found by the team at Rhino Security Labs☆836Updated this week
- Burpsuite Extension to bypass 403 restricted directory☆1,603Updated last year
- CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost☆1,315Updated 4 years ago
- Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.☆1,855Updated 4 years ago