这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.

CVE-2024-30090 - LPE PoC

SecGPT网络安全大模型

Nuclei POC，每2小时更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现。已有41w+POC，其中3.5w+高质量POC

21 Lessons, Get Started Building with Generative AI

some fun php exploits

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-…

Pattern recognition for hosts, services, and content

SSD Secure Disclosure Advisories

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-…

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

ZyXEL NAS326 Modernisation 2019

超级SQL注入工具（SSQLInjection）是一款基于HTTP协议自组包的SQL注入工具,采用C#开发，直接操作TCP会话来进行HTTP交互，支持出现在HTTP协议任意位置的SQL注入，支持各种类型的SQL注入，支持HTTPS模式注入；支持以盲注、错误显示、Union注入等方式来获取数据；支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQL…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Modular Post‑Exploitation, and OPSEC‑Focused Transport

Sophos-ReversingLabs 20 million sample dataset

16,432 Free Yara rules created by

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

OSS-Fuzz - continuous fuzzing for open source software.

ToolSet for VxWorks Based Embedded Device Analyses

High-performance, scalable time-series database designed for Industrial IoT (IIoT) scenarios

ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.

Machine Learning as a Service

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Chromium中文文档，学习google家的架构