Exploits + Shellcode + GHDB
exploit-database/exploitdbexploitdb // The official Exploit-Database repository
curated-resourceseducationexploitation+7
253
exploit-database/exploitdbexploitdb // The official Exploit-Database repository
wattocyber/offensive-one-liners110 offensive security one-liners for authorized testing and CTFs, organized in one markdown notebook by category and kill-chain step. Dual-use…
chaelsoo/zetsuA personal RAG system for offensive security knowledge
brucedevices/firmwarePredatory ESP32 Firmware
nullroot-red/cve-2026-23744Proof-of-concept and offensive security research analyzing CVE-2026-23744 (MCPJam Inspector Unauthenticated RCE, Patched in v1.4.3+).
ahndrewalters/projectsecurity-homelabHands-on homelab simulating the Log4Shell (CVE-2021-44228) vulnerability. Deploy Docker containers to build a vulnerable target and attacker machine,…
nullsecuritynet/toolsCurated collection of security tools, exploits, proof-of-concept code, shellcodes, and scripts for penetration testing and educational offensive…
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
thehackersbrain/certificate-of-compromiseSoK/Whitepaper on Offensive Operations against Active Directory Certificate Service
flangvik/sharpcollectionNightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps…
ly4k/certipyTool for Active Directory Certificate Services enumeration and abuse
elttam/publicationsOffensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…
j4ck3lsyn-gen2/reportsCurated collection of cybersecurity research reports covering CVE analysis, exploit research, threat intelligence, and offensive security from…
mtaha-sec/bash-apocalypseRecreating Shellshock (CVE-2014-6271) - the bash vulnerability that endangered millions of servers. Automated exploitation toolkit + Burp Suite…
eshlomo1/cloudsecMaster the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…
mr-un1k0d3r/azureredopsAzure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID
0x00pf/0x00sec_codeEducational repository of offensive security source code: remote shells, ELF injectors, crypters, memory injection, and droppers for Linux,…
star-sg/presentationsCurated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…