hacktricks
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
ctfcurated-resourceseducation+11
12.6k
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
zales2004/sunset-noontide-pentestingDescription Professional penetration testing assessment of the Sunset: Noontide VulnHub machine, covering reconnaissance, service enumeration,…
abraxas/cve-2025-38502-linux-lpeResearch repository for CVE-2025-38502, a Linux kernel BPF cgroup local storage out-of-bounds access via tail calls enabling local privilege…
purpleailab/decepticonAutonomous Hacking Agent for Red Team
0xmr007/lab4purplesecLab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSense +…
blasty/wake-and-breakPSP exploit for AMD navi31 (RX 7900) GPUs that disables firmware signature checks so the card loads unsigned SMU, SDMA, MEC, IMU and RLC firmware;…
carlospolop/purplepandaIdentify privilege escalation paths within and across different clouds
agampreet-singh/redrootRedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
sadpainy/stuxnetEducational reconstruction of the Stuxnet worm for malware analysis and defensive research. Includes modules for privilege escalation, rootkit…
tc4dy/cve-2026-41091-poc-exploitCVE-2026-41091 RedSun | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM 🔥 via Cloud Files API + NTFS junction…
zishanadthandar/pentestJekyll-based pentesting knowledge base with methodology guides, cheatsheets, tool indexes, certification roadmaps, and curated practice lab and CTF…
john-popovici/cve-2026-31431-copyfail-linux-privescA demo and explanation of CVE-2026-31431
cmd-tools/gtfocliGTFO Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems.
gillarchnganasan2735/cve-2026-41089-netlogon-rce-pocAutomate Netlogon CVE-2026-41089 validation and defensive testing through integrated AI security workflows, enabling rapid risk assessment and…
g4sp4rcs/cve-2019-11707-from-an-ionmonkey-type-confusion-to-system-Windows proof-of-concept exploit chain for CVE-2019-11707, a Firefox IonMonkey type confusion, combining browser RCE with sandbox escape to achieve…
broskigx/oihk-pentestingAutonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible…