Top 16 exploit-development Open-Source Projects

• x64dbg

  32 43,229 9.0 C++

  An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

  

Project mention: we need a 2015E revival. | /r/oldrobloxrevivals | 2023-12-07

• h4cker

  4 16,589 9.2 Jupyter Notebook

  This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

  

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• nuclei-templates

  13 8,057 10.0 JavaScript

  Community curated list of templates for the nuclei engine to find security vulnerabilities.

  

Project mention: Script kiddie tools preferred by the hackers of this channel? | /r/hacking | 2023-07-08

Check https://github.com/projectdiscovery/nuclei mostly for CVEs.

• gef

  15 6,489 8.4 Python

  GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

Project mention: Beej's Quick Guide to GDB (2009) | news.ycombinator.com | 2023-11-05

There is also GEF, which is widely used by the reverse engineering and CTF community.

https://github.com/hugsy/gef

• HackSysExtremeVulnerableDriver

  1 2,323 5.4 C

  HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

• rp

  1 1,722 3.5 C++

  rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

• herpaderping

  1 1,056 3.2 C++

  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• like-dbg

  5 728 7.1 Python

  Fully dockerized Linux kernel debugging environment

• Hydroxide

  7 350 4.8 Lua

  Lua runtime introspection and network capturing tool for games on the Roblox engine. (by Upbolt)

Project mention: Help Maybe? | /r/robloxhackers | 2023-06-01

Yeah but it is just visuals on your screen sadly, it doesn't update anything, especially in a popular game like bloxburg. In smaller games with little anticheat you might have more luck with remotescripts. Look into remote script execution, and I suggest https://github.com/Upbolt/Hydroxide as a remote spy, even though I don't know if it works on any other executors than Synapse X.

• ShadowSteal

  1 201 0.0 Nim

  Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

• OSCE

  1 186 0.0 Python

  Collection of things made during my preparation to take on OSCE (by ihack4falafel)

• research

  1 159 10.0 JavaScript

  VerSprite Security Research (by VerSprite)

  

• Simos18_SBOOT

  5 84 0.0 Python

  Documentation and tools about Simos18 SBOOT (Supplier Bootloader), including a Seed/Key bypass and Tricore boot password recovery tool.

• ronin-exploits

  1 60 6.8 Ruby

  A Ruby micro-framework for writing and running exploits

  

• code_caver

  2 26 10.0 Python

  Python based WinDbg script to automate the search for code caves in binaries and libraries.

• writeups-about-analysis-CVEs-and-Exploits-on-the-Windows

  1 10 1.8

  I collect writeup about analysis CVEs and Exploits on the Windows in this repository.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

exploit-development related posts

• !py in the command line, what does it means?

  2 projects | /r/learnprogramming | 4 Mar 2023

• Fully dockerized Linux kernel debugging environment

  1 project | /r/netsec | 11 Aug 2022

• Fully Dockerized Linux kernel debugging environment

  3 projects | news.ycombinator.com | 11 Aug 2022

• Fully Dockerized Linux kernel debugging environment

  1 project | /r/patient_hackernews | 11 Aug 2022

• Fully Dockerized Linux kernel debugging environment

  1 project | /r/hackernews | 11 Aug 2022

• Fully Dockerized Linux kernel debugging environment

  1 project | /r/hypeurls | 11 Aug 2022

• ShadowSteal: Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

  1 project | /r/purpleteamsec | 1 Aug 2021
• A note from our sponsor - SaaSHub
  www.saashub.com | 3 May 2024

  SaaSHub helps you find the best software and product alternatives Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com