Exploitation

nil0x42/phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

hasherezade/pe_to_shellcode

Converts PE into a shellcode

googleprojectzero/sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

nfcgate/nfcgate

An NFC research toolkit application for Android

rhinosecuritylabs/cves

Proof-of-Concept exploits for CVEs found by the team at Rhino Security Labs

harleyqu1nn/aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

justasmasiulis/lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

greshake/llm-security

Proof-of-concept demos and research on indirect prompt injection attacks against application-integrated LLMs, covering data exfiltration, remote…

tarlogicsecurity/bluespy

PoC to record audio from a Bluetooth device

michalmalik/osx-re-101

A collection of resources for OSX/iOS reverse engineering.

nccgroup/singularity

A DNS rebinding attack framework.

4w4k3/beelogger

Generate Gmail Emailing Keyloggers to Windows.

bc-security/starkiller

Starkiller is a Frontend for PowerShell Empire.

t6x/reaver-wps-fork-t6x

Brute-force attack tool against WPS registrar PINs to recover WPA/WPA2 passphrases, supporting online brute force and offline Pixie Dust attacks on…

nixawk/labs

Vulnerability Labs for security analysis

googleprojectzero/0days-in-the-wild

Repository for information about 0-days exploited in-the-wild.