Tools

exploit-database/exploitdb

exploitdb // The official Exploit-Database repository

mtaha-sec/bash-apocalypse

Recreating Shellshock (CVE-2014-6271) - the bash vulnerability that endangered millions of servers. Automated exploitation toolkit + Burp Suite…

winterknife/silverpick

Windows User-Mode Shellcode Development Framework (WUMSDF)

fkshield/cve-2025-5548

End-to-end exploitation lab for CVE-2025-5548 (FreeFloat FTP Server stack buffer overflow). Includes static analysis with IDA/Ghidra, binary fuzzing,…

x-3306/project-onyx

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…

frkngksl/shoggoth

Polymorphic encryptor that transforms shellcode, PE, and COFF files into obfuscated, position-independent payloads with RC4 and random block cipher…

frkngksl/hintinject

A PoC project for embedding shellcode to Hint/Name Table

elrajiii/cve-2025-5548

Buffer overflow in FreeFloat FTP Server 1.0

themoonsir/watcher

Detection reverse shell and kill it before trying shell.

giriaryan694-a11y/cve-2025-32433_rce_exploit

This exploit script is designed to simplify exploitation of the Erlang/OTP SSH vulnerability CVE-2025-32433 in the TryHackMe lab environment.

r00t-3xp10it/redpill

Assist reverse tcp shells in post-exploration tasks

0xsch1zo/nullgate

Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.

virtualalllocex/defcon-31-syscalls-workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".