vulnerable windows binaries for exploitation practice
☆46Jun 6, 2022Updated 3 years ago
Alternatives and similar repositories for vulnbins
Users that are interested in vulnbins are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- I have created these custom servers for preparing EXP-301 course (aka WUMED) exam and hope it will help to take OSED certification. Feel …☆50Nov 15, 2023Updated 2 years ago
- Get SYSTEM via SeDebugPrivilege☆24Jun 6, 2022Updated 3 years ago
- Signatus - A Vulnerable TCP server to practice Win32 exploitation☆51Jun 13, 2021Updated 4 years ago
- rcat☆75Mar 7, 2022Updated 4 years ago
- QuoteDB - A Vulnerable TCP Server to practice Win32 exploitation☆78Dec 21, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- POC CVE-2019-0708 with python script!☆14Jun 24, 2019Updated 6 years ago
- A curated list of resources for the OSED journey.☆72Feb 3, 2022Updated 4 years ago
- A tool for developing bad character-free shellcode to bypass DEP with WriteProcessMemory (32-bit only)☆74Jul 29, 2022Updated 3 years ago
- bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)☆609Jul 15, 2024Updated last year
- TESTR - A Vulnerable Python Web-App to practice XSS and Command Injection☆43Oct 8, 2022Updated 3 years ago
- Arbitrary File Delete in Windows Installer before 10.0.19045.2193☆30Nov 6, 2022Updated 3 years ago
- SeManageVolumePrivilege to SYSTEM☆150Nov 22, 2023Updated 2 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆17Jul 22, 2022Updated 3 years ago
- Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course☆28Mar 13, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CLI monitor for windows process- & file activity☆97Nov 20, 2020Updated 5 years ago
- Chat.JS - Vulnerable NodeJS Web-App to practice NoSQLi and Deserialization exploitation☆32Mar 21, 2021Updated 5 years ago
- OSED Practice binary☆26Nov 23, 2023Updated 2 years ago
- ☆12Aug 1, 2023Updated 2 years ago
- Python based Bloodhound data converter from the legacy pre 4.1 format to 4.1+ format☆64Jun 30, 2022Updated 3 years ago
- Exploit Development CheatSheet.☆18Aug 9, 2021Updated 4 years ago
- A collection of Windows x32 exploits created while preparing for the OSED certification exam☆25Jun 29, 2021Updated 4 years ago
- ORDER - A small Python web-app to practice blind SQLi in order by☆22Mar 21, 2021Updated 5 years ago
- SeRestorePrivilege to SYSTEM☆136Oct 8, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆198Feb 14, 2024Updated 2 years ago
- Exploits made practicing for OSCE☆23Dec 3, 2020Updated 5 years ago
- Tools I use on red team engagements and more☆35Mar 14, 2024Updated 2 years ago
- Caddy v2 module to filter requests based on C2 profiles☆46Apr 24, 2025Updated last year
- Notes template for Offensive Security's EXP-301 course and OSED exam☆20Mar 4, 2022Updated 4 years ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆71Mar 6, 2026Updated 2 months ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆189Mar 14, 2025Updated last year
- ☆21Dec 1, 2021Updated 4 years ago
- Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)☆806Aug 18, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆73Mar 6, 2024Updated 2 years ago
- Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption☆19Aug 5, 2022Updated 3 years ago
- ☆12Feb 7, 2023Updated 3 years ago
- generate payloads that force authentication against an attacker machine☆120Nov 6, 2022Updated 3 years ago
- ☆221Mar 26, 2024Updated 2 years ago
- Certipy in Docker☆13Mar 28, 2024Updated 2 years ago
- A persistent database + CLI for your BBOT scan data 🧡☆44Updated this week