Collection of things made during my preparation to take on OSCE

exploit-exercises exploits exploit-code osce exploit-development

• Updated Feb 24, 2022
• Python

AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. It is our hope that this tool will be useful to red teams over the short term, while over the long term help AV/EDR vendors improve how they handle AHK scripts.

ahk exploitation-framework ahk-script av-evasion exploit-code exploit-development av-bypass purpleteam purple-team attack-simulation edr-bypass edr-evasion evasion-techniques

• Updated Jul 21, 2025
• AutoHotkey

Recovery of Plaintext iMessage Data Without Breaking Crypto

proof-of-concept imessage exploit-code injection-attacks

• Updated Apr 9, 2016
• JavaScript

Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.

list database proof-of-concept exploit poc all cve-scanning 0day cvss threat-intelligence proof-of-concepts exploit-code latest exploit-db vulnerability-database 0day-exploit securewithumer exploit-index cummunity-currated-list verified-pocs

• Updated Nov 12, 2026
• Python

Collection of things made during my preparation to take on OSEE

exploit-exercises exploits exploit-code exploit-development osee

• Updated Jul 30, 2019
• C

Security Research

vulnerabilities exploit-code security-research

• Updated Jul 2, 2025
• Shell

Real world and CTFs exploiting web/binary POCs.

exploit vulnerability pwn scada pwned exploit-code scada-security scada-exploitation

• Updated Jul 5, 2020
• Python

Alphanumeric Shellcode (x86) Encoder

shellcode oscp exploit-code osce exploit-development shellcoding shellcode-development shellcodes

• Updated Feb 24, 2022
• Python

A collection of my quick and dirty scripts for vulnerability POC and detections

python security scanner vulnerability information-security vulnerability-detection vulnerability-management exploiting-vulnerabilities exploit-code

• Updated Dec 4, 2025
• Lua

Example files to experience basic exploit techniques.

exploit exploit-exercises tutorials exploitation exploit-code

• Updated Apr 29, 2019
• Python

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

jira exploit exploits jira-issue vulnerability cve jira-rest-api exploit-database jira-api exploiting-vulnerabilities exploit-code exploitdb cve-exploit cve-2019-8449

• Updated Feb 3, 2020
• Python

when i started web application security testing, i fall in love with web shell development and designed some PHP based web shells. This repository contains all my codes which i released in public.

bruteforce symlink php-backdoor exploit-code joomla-sql-injection

• Updated Feb 17, 2018
• PHP

Challenges and vulnerabilities exploitation.

exploit-exercises exploits exploitation exploiting-vulnerabilities exploit-code exploiting

• Updated Dec 26, 2020
• Python

Exploits developed by Mikael Kall

exploits oscp exploit-code exploit-development hackthebox

• Updated Jun 19, 2023
• Python

Proof of Concept code for CVE-2015-0345 (APSB15-07)

proof-of-concept xss coldfusion exploit-code

• Updated Jun 12, 2015

I'll post my custom shellcode I make here!

shellcode exploit-code assembly-x86 exploit-development

• Updated Oct 23, 2019
• Assembly

CVE-2026-0073 – Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) | Zero-click TLS type confusion to unauthenticated shell. 2 tools: Full Exploit (ADB shell, cmd exec, subnet scan, mDNS, stealth, SOCKS5) & SafeDetect (non-intrusive audit, CIDR, JSON/CSV/HTML). Red/Blue team toolkit. Ethical & Safety use only.

android proof-of-concept exploit toolkit poc pocs exploit-code exploit-kit android-vuln android-vulnerability android-vulnerability-exploit-msf-venom-metasploid android-vulnerabilities cve-2026-0073

• Updated Sep 26, 2026
• Python

Getting Envisioncollision to actually work.

security backdoor exploit perl hacking nsa exploit-code ipboard shadowbrokers eqgrp equation-group envisioncollision

• Updated Oct 19, 2017
• Perl

CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7–7.1.1. | 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). Use Ethically & Authorized Enviorement, Stay Legal <3

wordpress proof-of-concept exploit toolkit poc toolkits cve wordpress-site cve-scanning exploit-code blue-team redteam wordpress-vulnerability-scanner wordpress-vulnerability-scanning wordpress-vulnerability wordpress-vulnerable wordpress-cve wordpress-vuln wordpress-vulnerability-scan wordpress-vulnerabilities

• Updated Oct 12, 2026
• Python

Vulnserver exploits

fuzzing peach offensive-security ollydbg exploit-code osce vulnserver egghunter peach-fuzzer osce-prep boofuzz offensivesecurity socket-reuse

• Updated May 1, 2020
• Python