vulnerable windows binaries for exploitation practice
☆46Jun 6, 2022Updated 3 years ago
Alternatives and similar repositories for vulnbins
Users that are interested in vulnbins are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- I have created these custom servers for preparing EXP-301 course (aka WUMED) exam and hope it will help to take OSED certification. Feel …☆50Nov 15, 2023Updated 2 years ago
- Get SYSTEM via SeDebugPrivilege☆24Jun 6, 2022Updated 3 years ago
- Signatus - A Vulnerable TCP server to practice Win32 exploitation☆51Jun 13, 2021Updated 4 years ago
- rcat☆75Mar 7, 2022Updated 4 years ago
- QuoteDB - A Vulnerable TCP Server to practice Win32 exploitation☆78Dec 21, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- POC CVE-2019-0708 with python script!☆14Jun 24, 2019Updated 6 years ago
- A curated list of resources for the OSED journey.☆72Feb 3, 2022Updated 4 years ago
- A tool for developing bad character-free shellcode to bypass DEP with WriteProcessMemory (32-bit only)☆73Jul 29, 2022Updated 3 years ago
- bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)☆606Jul 15, 2024Updated last year
- TESTR - A Vulnerable Python Web-App to practice XSS and Command Injection☆42Oct 8, 2022Updated 3 years ago
- Arbitrary File Delete in Windows Installer before 10.0.19045.2193☆30Nov 6, 2022Updated 3 years ago
- SeManageVolumePrivilege to SYSTEM☆149Nov 22, 2023Updated 2 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆17Jul 22, 2022Updated 3 years ago
- Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course☆27Mar 13, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CLI monitor for windows process- & file activity☆97Nov 20, 2020Updated 5 years ago
- Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation☆31Mar 21, 2021Updated 5 years ago
- OSED Practice binary☆26Nov 23, 2023Updated 2 years ago
- ☆12Aug 1, 2023Updated 2 years ago
- Python based Bloodhound data converter from the legacy pre 4.1 format to 4.1+ format☆64Jun 30, 2022Updated 3 years ago
- Exploit Development CheatSheet.☆18Aug 9, 2021Updated 4 years ago
- A collection of Windows x32 exploits created while preparing for the OSED certification exam☆25Jun 29, 2021Updated 4 years ago
- ORDER - A small Python web-app to practice blind SQLi in order by☆22Mar 21, 2021Updated 5 years ago
- SeRestorePrivilege to SYSTEM☆136Oct 8, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆198Feb 14, 2024Updated 2 years ago
- Exploits made practicing for OSCE☆23Dec 3, 2020Updated 5 years ago
- Tools I use on red team engagements and more☆34Mar 14, 2024Updated 2 years ago
- A pykd maintenance fork☆74Feb 26, 2025Updated last year
- Caddy v2 module to filter requests based on C2 profiles☆46Apr 24, 2025Updated 11 months ago
- Notes template for Offensive Security's EXP-301 course and OSED exam☆19Mar 4, 2022Updated 4 years ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆70Mar 6, 2026Updated last month
- my knowledge of linux privilege escalation☆11Oct 14, 2023Updated 2 years ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆188Mar 14, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆72Mar 6, 2024Updated 2 years ago
- ☆21Dec 1, 2021Updated 4 years ago
- Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)☆802Aug 18, 2024Updated last year
- Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption☆19Aug 5, 2022Updated 3 years ago
- ☆11Feb 7, 2023Updated 3 years ago
- generate payloads that force authentication against an attacker machine☆120Nov 6, 2022Updated 3 years ago
- ☆221Mar 26, 2024Updated 2 years ago