Topic: 0day Goto Github

👇 Here are 136 public repositories matching this topic...

0dayninja / windows-x64-processes-injector
0day,0day Windows/x64 Inject All Processes With Meterpreter Reverse Shell Shellcode (655 bytes)
User: 0dayninja
0day windows process-injection meterpreter shell-code

1n3 / exploits
0day,Exploits by 1N3 @CrowdShield @xer0dayz @XeroSecurity
User: 1n3
Home Page: https://xerosecurity.com
cve ctf 0day poc exploits bug-bounties 1n3 crowdshield

1n3 / wordpress-xmlrpc-brute-force-exploit
0day,Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield
User: 1n3
Home Page: https://crowdshield.com
wordpress-xmlrpc xml-rpc 0day wordpress exploit poc

b1tg / cve-2023-38831-winrar-exploit
0day,CVE-2023-38831 winrar exploit generator
User: b1tg
Home Page: https://b1tg.github.io/post/cve-2023-38831-winrar-analysis/
0day exploit cve

bcoles / metasploit-logos
0day,Custom Metasploit logos
User: bcoles
metasploit metasploit-logos metasploit-banners msf ascii-art 0day

bo0om / php_imap_open_exploit
0day,Bypassing disabled exec functions in PHP (c) CRLF
User: bo0om
0day exploit php bypass imap

cr4sh / aptiocalypsis
0day,Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares
User: cr4sh
0day ami exploit firmware intel smm uefi vulnerability

cr4sh / secretnet_expl
0day,LPE exploits for Secret Net and Secret Net Studio
User: cr4sh
0day crapware driver exploit fakeav idiots kernel lpe russian-imbiciles security vulnerability windows

cr4sh / thinkpwn
0day,Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors
User: cr4sh
0day exploit firmware intel smm uefi vulnerability

drunkenshells / disclosures
0day,Public Disclosures
User: drunkenshells
cve cves 0day 0-day security

george-boop-svg / chinese-hackers-use-wps-to-attack
0day,WPS 0day.hen the wps software is running, an api interface with port 4709 will be opened. An attacker can request this interface to execute commands.
User: george-boop-svg
0day 4709 attackwps ksoqing wps-command-execution

ghosttroops / scan4all
0day,Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
Organization: ghosttroops
Home Page: https://scan4all.51pwn.com
attack auto golang hacker tools nuclei bugbounty bugbounty-tools hacktools pentest-tool

googleprojectzero / 0days-in-the-wild
0day,Repository for information about 0-days exploited in-the-wild.
Organization: googleprojectzero
Home Page: https://googleprojectzero.github.io/0days-in-the-wild
exploits vulnerabilities 0day

hacktoolspack / hack-tools
0day,hack tools
User: hacktoolspack
hacks tools python perl sqlinjection injection javascript hack hacking-tool hacking

hktalent / spring-spel-0day-poc
0day,spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963
User: hktalent
Home Page: https://51pwn.com
rce poc 0day exp spring spring-cloud-function java spel cve-2022-22963

hook-s3c / cve-2018-18852
0day,CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.
User: hook-s3c
cerio router rce 0day exploit cve-2018-18852

illusionofchaos / ios-analyticsd-pre14.7-exploit
0day,iOS exploit (fixed in 14.7)
User: illusionofchaos
Home Page: https://habr.com/ru/post/579714/
ios swift 0day

illusionofchaos / ios-gamed-0day
0day,iOS gamed exploit (fixed in 15.0.2)
User: illusionofchaos
Home Page: https://habr.com/ru/post/579714/
ios swift 0day ios15

illusionofchaos / ios-nehelper-enum-apps-0day
0day,iOS 15 0-day exploit (still works in 15.0.2)
User: illusionofchaos
Home Page: https://habr.com/ru/post/579714/
ios swift 0day ios15

illusionofchaos / ios-nehelper-wifi-info-0day
0day,iOS 15 0-day exploit (still works in 15.0.2)
User: illusionofchaos
Home Page: https://habr.com/ru/post/579714/
ios swift 0day ios15

includesecurity / rtsphuzz
0day,RTSPhuzz - An RTSP Fuzzer written using the Boofuzz framework
Organization: includesecurity
fuzzer fuzzing rtsp rtsp-server mozilla-open-source sponsored 0day research-tool

jas502n / 0day-security-software-vulnerability-analysis-technology
0day,0day安全_软件漏洞分析技术
User: jas502n
hack 0day security software binary vulnerability

jas502n / ubuntu-0day
0day,all 4.4 ubuntu aws instances are vulnerable
User: jas502n
0day ubuntu hack tools root

k8gege / ciscoexploit
0day,Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
User: k8gege
cisco exploit poc exp getshell rce 0day

k8gege / k8tools
0day,K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
User: k8gege
exploit apt 0day poc getshell pentest hacking scanner privilege-escalation bypass

k8gege / ppt
0day,PPT教程
User: k8gege
Home Page: https://www.cnblogs.com/k8gege/
pentest hacking security exploit 0day ppt k8tool

k8gege / solrexp
0day,Apache Solr <=8.2.0 Velocity Template 0day Exploit
User: k8gege
apache solr 0day exploit getshell rce exp k8cscan

k8gege / zimbraexploit
0day,Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
User: k8gege
zimbra xxe rce ssrf upload getshell exploit cve-2019-9621 poc 0day

klezvirus / cve-2021-40444
0day,CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
User: klezvirus
cve-2021-40444 msword office 0day rce remote-code-execution

mcdulltii / springshell_0-day
0day,Spring Core RCE 0-day Vulnerability (https://share.vx-underground.org/)
User: mcdulltii
spring-core spring-core-rce rce 0day

omarhashem123 / security-research
0day,This repository contains proof of concept for zero days and CVEs that were found by Omar Hashem through Security Research
User: omarhashem123
Home Page: https://eg.linkedin.com/in/omar-1-hashem
0day cve security-research zero-days bypass

ostorlab / kev
0day,Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.
Organization: ostorlab
cisa-kev vulnerability 0day cisa exploits

owasp / joomscan
0day,OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/
Organization: owasp
Home Page: https://www.secologist.com/open-source-projects
owasp joomla joomla-cms joomscan vunerability scanner vulnerability-scanners exploit 0day

p0wershe11 / proxylogon
0day,ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)
User: p0wershe11
proxylogon cve-2021-26855 cve-2021-26855-ssrf cve-2021-27065 exploit microsoft-exchange microsoft-exchange-proxylogon microsoft-exchange-server 0day zeroday

peiqi0 / peiqi-wiki-book
0day,面向网络安全从业者的知识文库🍃
User: peiqi0
Home Page: https://peiqi.wgpsec.org
cve 1day 0day vuln redteam peiqi-wiki

project-sekai-ctf / sekaictf-2024
0day,🎵 Official source code and writeups for SekaiCTF 2024!
Organization: project-sekai-ctf
Home Page: https://2024.ctf.sekai.team/
0day binary-exploitation blockchain competitive-programming cryptography ctf ctf-challenges ctf-events ctf-solutions ctf-writeups

sickcodes / no-sandbox
0day,No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox. TL;DR exploits in these browser based applications are already sandboxed escaped: https://no-sandbox.io/
User: sickcodes
Home Page: https://no-sandbox.io/
chrome chromium exploit rce 0day research bugbounty bug

stuub / cve-2024-32640-sqli-muracms
0day,CVE-2024-32640 | Automated SQLi Exploitation PoC
User: stuub
0day cve cve-2024 masacms muracms poc rce sqli cve-2024-32640 cve-2024-32640-poc

stuub / cve-2024-4040-ssti-lfi-poc
0day,CVE-2024-4040 CrushFTP SSTI LFI & Auth Bypass | Full Server Takeover | Wordlist Support
User: stuub
crushftp cve lfi owasp python rce sftp cve-2024-4040 cve2024-4040 0day

tweedge / springcore-0day-en
0day,Everything I needed to understand what was going on with "Spring4Shell" - translated source materials, exploit, links to demo apps, and more.
User: tweedge
spring4shell springcore java deserialization-vulnerability exploit 0day

v-i-x-x / amsi-bypass
0day,"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS
User: v-i-x-x
Home Page: https://www.offsec.com/offsec/amsi-write-raid-0day-vulnerability/
0day amsi-bypass amsi-evasion amsi-patch av avbypass edr-bypass vulnerability pentest pentesting

veo / vscan
0day,开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)
User: veo
Home Page: https://veo.pub/2021/vscan/
0day brute fingerprint fuzzing portscan redteam security

voidsec / exploit-development
0day,Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)
User: voidsec
Home Page: https://voidsec.com
exploit poc windows shellcode rop-exploitation rop rop-gadgets rop-chain aslr aslr-bypass

w01fh4cker / cve-2023-46747-rce
0day,exploit for f5-big-ip RCE cve-2023-46747
User: w01fh4cker
0day exploit f5 redteam cve-2023-46747

w01fh4cker / cve-2023-47246-exp
0day,exploit for cve-2023-47246 SysAid RCE (shell upload)
User: w01fh4cker
0day cve-2023-47246 exploit redteam sysaid

w01fh4cker / cve-2024-27198-rce
0day,CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4
User: w01fh4cker
jetbrains redteam teamcity cve-2024-27198 cve-2024-27199 0day auth exploit rce

w01fh4cker / serein
0day,【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。
User: w01fh4cker
gui batch 0day cve-2022-26134 cve-2022-22980 cve-2022-29464 cve-2022-22954 cve-2022-25078 cve-2022-8515 cve-2018-13379

w01fh4cker / serein_linux
0day,【Lazy Artifact】A graphical tool that collects urls in batches, and performs various nday detections on the collected urls in batches. It can be used for src mining, cnvd mining, 0day exploitation, building your own arsenal and other scenarios.
User: w01fh4cker
cve-2022-26134 auto python python3 src gui tool 0day cnvd cve

zadewg / livebox-0day
0day,CVE-2018-20377; 20575; 20576; 20577 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.
User: zadewg
0day csrf privacy router

zeromemoryex / apt38-0day-stealer
0day,APT38 Tactic PoC for Stealing 0days from security professionals
User: zeromemoryex
win32api rce malware visual-studio lazarus malware-research red-team 0day 0day-stealer apt-38