vulnerable windows binaries for exploitation practice
☆46Jun 6, 2022Updated 4 years ago
Alternatives and similar repositories for vulnbins
Users that are interested in vulnbins are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- I have created these custom servers for preparing EXP-301 course (aka WUMED) exam and hope it will help to take OSED certification. Feel …☆49Nov 15, 2023Updated 2 years ago
- Get SYSTEM via SeDebugPrivilege☆24Jun 6, 2022Updated 4 years ago
- Signatus - A Vulnerable TCP server to practice Win32 exploitation☆56Jun 13, 2021Updated 5 years ago
- QuoteDB - A Vulnerable TCP Server to practice Win32 exploitation☆83Dec 21, 2023Updated 2 years ago
- rcat☆76Mar 7, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- POC CVE-2019-0708 with python script!☆14Jun 24, 2019Updated 7 years ago
- Exploit Development CheatSheet.☆18Aug 9, 2021Updated 4 years ago
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 5 months ago
- bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)☆622Jul 15, 2024Updated 2 years ago
- A curated list of resources for the OSED journey.☆75Feb 3, 2022Updated 4 years ago
- A tool for developing bad character-free shellcode to bypass DEP with WriteProcessMemory (32-bit only)☆75Jul 29, 2022Updated 3 years ago
- TESTR - A Vulnerable Python Web-App to practice XSS and Command Injection☆45Oct 8, 2022Updated 3 years ago
- Arbitrary File Delete in Windows Installer before 10.0.19045.2193☆30Nov 6, 2022Updated 3 years ago
- Some notes + exercises that I've done during my study for the Offensive Security Exploit Developer.☆95Jun 29, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CLI monitor for windows process- & file activity☆98Nov 20, 2020Updated 5 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆17Jul 22, 2022Updated 4 years ago
- A collection of useful API endpoints for security operators and administrators☆16Jan 8, 2026Updated 6 months ago
- Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation☆33Mar 21, 2021Updated 5 years ago
- ☆12Aug 1, 2023Updated 2 years ago
- ☆18Dec 11, 2025Updated 7 months ago
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated last year
- A collection of Windows x32 exploits created while preparing for the OSED certification exam☆28Jun 29, 2021Updated 5 years ago
- Python based Bloodhound data converter from the legacy pre 4.1 format to 4.1+ format☆63Jun 30, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆18Updated this week
- ☆11Feb 16, 2025Updated last year
- ORDER - A small Python web-app to practice blind SQLi in order by☆22Mar 21, 2021Updated 5 years ago
- ☆201Feb 14, 2024Updated 2 years ago
- Kerberos manipulation library in pure Python☆17Jan 31, 2026Updated 5 months ago
- SeRestorePrivilege to SYSTEM☆142Oct 8, 2021Updated 4 years ago
- SeManageVolumePrivilege to SYSTEM☆158Nov 22, 2023Updated 2 years ago
- Exploits made practicing for OSCE☆23Dec 3, 2020Updated 5 years ago
- Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course☆30Mar 13, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Tools I use on red team engagements and more☆36Jun 26, 2026Updated last month
- OSED Practice binary☆27Nov 23, 2023Updated 2 years ago
- Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools☆304Sep 18, 2025Updated 10 months ago
- Tools/scripts I used/developed during the EXP-301 course.☆27May 17, 2022Updated 4 years ago
- Tailscale/Headscale C2 profile and agent for Mythic☆25Mar 14, 2026Updated 4 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆21Jul 15, 2025Updated last year
- Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)☆828Aug 18, 2024Updated last year