mufeedvh/moonwalk
Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚
Language: Rust
#cve #exploit #exploitation #infosec #infosectools #linux #privilege_escalation #red_teaming #redteam #redteam_tools #security #security_tools
Stars: 279 Issues: 0 Forks: 23
https://github.com/mufeedvh/moonwalk

Puliczek/awesome-list-of-secrets-in-environment-variables
🦄🔒 Awesome list of secrets in environment variables 🖥️
#blue_team #bugbounttips #bugbounty #cve_2021_44228 #cybersecurity #exploit #log4j #pentesting #poc #red_team #security #security_writeups #writeups
Stars: 139 Issues: 0 Forks: 9
https://github.com/Puliczek/awesome-list-of-secrets-in-environment-variables

Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera
🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337
Language: HTML
#bugbounty #bugbounty_writeups #bugbountytips #cve #cve_2022_0337 #cybersecurity #exploit #hacking #payload #pentest #pentesting #red_team #security #security_writeups #writeups
Stars: 131 Issues: 0 Forks: 22
https://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

AgainstTheWest/NginxDay
Nginx 18.1 04/09/22 zero-day repo
#exploit #ldap_authentication #nginx #nginxday #zero_day
Stars: 159 Issues: 1 Forks: 17
https://github.com/AgainstTheWest/NginxDay

firefart/stunner
Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.
Language: Go
#exploit #misconfiguration #security #stun #testing #turn #webrtc
Stars: 169 Issues: 0 Forks: 14
https://github.com/firefart/stunner

jbaines-r7/through_the_wire
CVE-2022-26134 Proof of Concept
Language: Python
#cve_2022_26134 #exploit #poc
Stars: 109 Issues: 0 Forks: 33
https://github.com/jbaines-r7/through_the_wire

edoardottt/awesome-hacker-search-engines
A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more
#awesome #awesome_list #awesome_lists #bugbounty #dns #domain #exploit #hacking #hacking_tools #osint #osint_tool #redteam #redteaming #search_engine #security #security_tools #url #vulnerabilities #vulnerability #wifi_network
Stars: 412 Issues: 0 Forks: 20
https://github.com/edoardottt/awesome-hacker-search-engines

b1tg/CVE-2023-38831-winrar-exploit
CVE-2023-38831 winrar exploit generator
Language: Python
#0day #cve #exploit
Stars: 294 Issues: 0 Forks: 45
https://github.com/b1tg/CVE-2023-38831-winrar-exploit

Cr4sh/SmmBackdoorNg
Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks
Language: C
#backdoor #boot #exploit #firmware #intel #malware #smm #uefi
Stars: 118 Issues: 0 Forks: 18
https://github.com/Cr4sh/SmmBackdoorNg

actuator/Android-Security-Exploits-YouTube-Curriculum
🔓A curated list of modern Android exploitation conference talks.
#android #blackhat #defcon #exploit #hacking #nullcon #reverse_engineering #security #shmoocon #strange_loop_conference #troopers24
Stars: 229 Issues: 0 Forks: 18
https://github.com/actuator/Android-Security-Exploits-YouTube-Curriculum

xaitax/CVE-2024-6387_Check
CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH
Language: Python
#cve_2024_6387 #exploit #pentesting #python3 #redteam
Stars: 343 Issues: 0 Forks: 70
https://github.com/xaitax/CVE-2024-6387_Check

Zyrexnn/Cybermes
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
Language: Python
#ai_agent #appsec #bug_bounty #cvss_v3 #cybersecurity #devsecops #exploit_validation #hermes_agent #infosec #llm_security #nuclei #offensive_security #penetration_testing #playwright #reconnaissance #red_teaming #security_tools #sqlmap #threat_research #vulnerability_scanner
Stars: 560 Issues: 0 Forks: 98
https://github.com/Zyrexnn/Cybermes

ikow/php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Language: Python
#cve_2026_109618 #cve_2026_109619 #detection_rules #exploit #php_exploit #php_security #php2shell #poc #rce #session_upload_progress #suricata_rules #vulnerability_research #waf_rules #wordpress_security
Stars: 1205 Issues: 2 Forks: 441
https://github.com/ikow/php2shell-poc