vulnerable windows binaries for exploitation practice
☆46Jun 6, 2022Updated 4 years ago
Alternatives and similar repositories for vulnbins
Users that are interested in vulnbins are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- I have created these custom servers for preparing EXP-301 course (aka WUMED) exam and hope it will help to take OSED certification. Feel …☆50Nov 15, 2023Updated 2 years ago
- Get SYSTEM via SeDebugPrivilege☆24Jun 6, 2022Updated 4 years ago
- Signatus - A Vulnerable TCP server to practice Win32 exploitation☆57Jun 13, 2021Updated 5 years ago
- QuoteDB - A Vulnerable TCP Server to practice Win32 exploitation☆84Dec 21, 2023Updated 2 years ago
- rcat☆79Mar 7, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- POC CVE-2019-0708 with python script!☆14Jun 24, 2019Updated 7 years ago
- Exploit Development CheatSheet.☆18Aug 9, 2021Updated 5 years ago
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated 2 weeks ago
- bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)☆634Jul 15, 2024Updated 2 years ago
- A tool for developing bad character-free shellcode to bypass DEP with WriteProcessMemory (32-bit only)☆76Jul 29, 2022Updated 4 years ago
- A curated list of resources for the OSED journey.☆82Feb 3, 2022Updated 4 years ago
- TESTR - A Vulnerable Python Web-App to practice XSS and Command Injection☆47Oct 8, 2022Updated 4 years ago
- Arbitrary File Delete in Windows Installer before 10.0.19045.2193☆30Nov 6, 2022Updated 3 years ago
- Some notes + exercises that I've done during my study for the Offensive Security Exploit Developer.☆97Jun 29, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CLI monitor for windows process- & file activity☆100Nov 20, 2020Updated 5 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- A collection of useful API endpoints for security operators and administrators☆16Jan 8, 2026Updated 9 months ago
- Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation☆34Mar 21, 2021Updated 5 years ago
- ☆12Aug 1, 2023Updated 3 years ago
- ☆18Dec 11, 2025Updated 10 months ago
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated last year
- A collection of Windows x32 exploits created while preparing for the OSED certification exam☆28Jun 29, 2021Updated 5 years ago
- Python based Bloodhound data converter from the legacy pre 4.1 format to 4.1+ format☆63Jun 30, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆24Jul 31, 2026Updated 2 months ago
- ☆11Feb 16, 2025Updated last year
- ORDER - A small Python web-app to practice blind SQLi in order by☆23Mar 21, 2021Updated 5 years ago
- ☆205Feb 14, 2024Updated 2 years ago
- Kerberos manipulation library in pure Python☆27Aug 24, 2026Updated last month
- SeRestorePrivilege to SYSTEM☆150Oct 8, 2021Updated 5 years ago
- SeManageVolumePrivilege to SYSTEM☆164Nov 22, 2023Updated 2 years ago
- Exploits made practicing for OSCE☆23Dec 3, 2020Updated 5 years ago
- Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course☆30Mar 13, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tools I use on red team engagements and more☆38Aug 12, 2026Updated 2 months ago
- OSED Practice binary☆28Nov 23, 2023Updated 2 years ago
- Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools☆304Sep 18, 2025Updated last year
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 7 months ago
- Tools/scripts I used/developed during the EXP-301 course.☆27May 17, 2022Updated 4 years ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)☆843Aug 18, 2024Updated 2 years ago