This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Exploitation Framework for Embedded Devices

Decrypted content of eqgrp-auction-file.tar.xz

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Linux privilege escalation auditing tool

🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

Miscellaneous exploit code

📦 Make security testing of K8s, Docker, and Containerd easier.

RouterOS Security Research Tooling and Proof of Concepts

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

Find exploits in local and online databases instantly

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

A list of resources in different fields of Computer Science

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

A Ruby framework designed to aid in the penetration testing of WordPress systems.

Find exploit tool

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

The Correlated CVE Vulnerability And Threat Intelligence Database API

A collection of curated Java Deserialization Exploits