Top 23 Exploit Open-Source Projects

• h4cker

  4 16,457 9.3 Jupyter Notebook

  This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

  

• routersploit

  11 11,857 5.4 Python

  Exploitation Framework for Embedded Devices

  

• InfluxDB

  www.influxdata.com

  sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• nuclei-templates

  13 7,979 10.0 JavaScript

  Community curated list of templates for the nuclei engine to find security vulnerabilities.

  

  Project mention: Script kiddie tools preferred by the hackers of this channel? | /r/hacking | 2023-07-08

  Check https://github.com/projectdiscovery/nuclei mostly for CVEs.

• linux-exploit-suggester

  1 5,170 3.9 Shell

  Linux privilege escalation auditing tool

  

• CDK

  4 3,620 2.8 Go

  📦 Make security testing of K8s, Docker, and Containerd easier.

  

• Computer-Science-Resources

  2 2,336 2.0

  A list of resources in different fields of Computer Science

• SUDO_KILLER

  8 2,092 8.8 Shell

  A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

• WorkOS

  workos.com

  sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• deepce

  1 1,096 5.5 Shell

  Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

  Project mention: How to Escape a Container | news.ycombinator.com | 2023-12-20

  Useful: https://github.com/stealthcopter/deepce

• featherduster

  1 1,058 0.0 Python

  An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

  

• herpaderping

  1 1,057 3.2 C++

  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

• isf

  1 998 0.0 Python

  ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

• Pompem

  1 939 10.0 Python

  Find exploit tool

• PoC

  10 786 5.3 Ruby

  Advisories, proof of concept files and exploits that have been made public by @pedrib.

• THC-Archive

  5 654 2.5 HTML

  All releases of the security research group (a.k.a. hackers) The Hacker's Choice

  

  Project mention: Why Isn't a Timer Capable of Preventing Brute Force | /r/AskComputerScience | 2023-04-23

  It is possible to brute force logins online, using something like Hydra, but many site already lockout an IP address after X failed login attempts.

• exploits

  3 575 2.8 C

  A handy collection of my public exploits, all in one place. (by 0xdea)

• KEV

  1 480 9.3

  Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

  

  Project mention: Open-Source Detector of CISA's Known Exploitable Vulnerabilities | news.ycombinator.com | 2024-01-15

• RomBuster

  1 420 6.4 Python

  RomBuster is a router exploitation tool that allows to disclosure network router admin password.

  

• dora

  6 300 0.0 Python

  Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found (by sdushantha)

• AnarchyExploitFixes

  9 264 9.8 Java

  Fix exploits on anarchy Minecraft servers

  Project mention: Possible plugin issue - don't fly above Y=123 in the nether | /r/constantiam | 2023-05-26

  Also a heads up, thrown projectiles such as arrows and tridents get removed after 15-25 seconds, I had a lightning generator that uses tridents (and doesn't create lag) and I've watched two tridents disappear. Constantiam is using a plugin called https://github.com/moom0o/AnarchyExploitFixes and it has a module that's meant to prevent snowball lag machines, and it removes any thrown projectile object that isn't an enderpearl (or witherskull). This plugin is also responsible for patching beehive nbt data.

• allinfosecnews_sources

  6 222 5.3

  A list of online news & info sources in the InfoSec/Cybersecurity space

  

  Project mention: Where do you learn about new and existing TTP's? | /r/cybersecurity | 2023-11-30

• OSCE

  1 186 0.0 Python

  Collection of things made during my preparation to take on OSCE (by ihack4falafel)

• Bookmarklet-Hacks-For-School

  11 130 10.0

  * READ THE README FOR INFO!! * Incoming Tags- z score statistics,find mean median mode statistics in ms excel,variance,standard deviation,linear regression,data processing,confidence intervals,average value,probability theory,binomial distribution,matrix,random numbers,error propagation,t statistics analysis,hypothesis testing,theorem,chi square,time series,data collection,sampling,p value,scatterplots,statistics lectures,statistics tutorials,business mathematics statistics,share stock market s

• ShonyDanza

  1 113 3.0 Python

  A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

• SaaSHub

  www.saashub.com

  sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Exploits related posts

• Possible plugin issue - don't fly above Y=123 in the nether
  1 project | /r/constantiam | 26 May 2023
• OSCP priv esc suggestions?
  1 project | /r/hacking | 23 Mar 2023
• cve-2023-22809
  1 project | /r/Infosec | 18 Jan 2023
• CVE-2023-22809
  1 project | /r/Infosec | 18 Jan 2023
• CVE-2023-22809
  1 project | /r/netcve | 18 Jan 2023
• Sudoedit can edit arbitrary files (CVE-2023-22809)
  1 project | /r/netsec | 18 Jan 2023
• Nothing new under the Sun - Discovering and exploiting a CDE bug chain
  2 projects | /r/netsec | 18 Jan 2023
• A note from our sponsor - WorkOS
  workos.com | 18 Apr 2024

  The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com