Hacking Libraries - Page 6

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

Rust 867Updated: 2 y ago License: Permissive (MIT)

hack tools

Python 864Updated: 2 y ago License: No License (No License)

C 864Updated: 2 y ago License: No License (No License)

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

JavaScript 860Updated: 2 y ago License: Permissive (MIT)

针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项，支持联动xray、burp、w13scan等被动批量

Python 859Updated: 2 y ago License: No License (No License)

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

Python 854Updated: 2 y ago License: Permissive (Apache-2.0)

:cherry_blossom: Interactive shellcoding environment to easily craft shellcodes

Python 854Updated: 2 y ago License: Permissive (MIT)

Payload launcher and serial number checker for Nintendo Switch

Kotlin 853Updated: 2 y ago License: Permissive (Apache-2.0)

Vulnerable server used for learning software exploitation

C 851Updated: 2 y ago License: Permissive (BSD-3-Clause)

Install And Use Kali Linux With Gui In Termux

Shell 849Updated: 2 y ago License: Permissive (MIT)

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。

C++ 847Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

a file-sharing tool that allows you to find the responsible person in case of a leakage

Go 845Updated: 2 y ago License: Permissive (BSD-3-Clause)

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

Python 844Updated: 4 y ago License: Permissive (Apache-2.0)

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

Java 842Updated: 3 y ago License: No License (No License)

Diablo for the Nintendo Switch

C++ 841Updated: 2 y ago License: Permissive (Unlicense)

A collection of vulnerable ARM binaries for practicing exploit development

C 840Updated: 2 y ago License: No License (No License)

A byte code analyzer for finding deserialization gadget chains in Java applications

Java 838Updated: 2 y ago License: Permissive (MIT)

hactool is a tool to view information about, decrypt, and extract common file formats for the Nintendo Switch, especially Nintendo Content Archives.

C 837Updated: 2 y ago License: Permissive (ISC)

Generate Professional Phishing Emails Fast And Easy

Python 833Updated: 2 y ago License: Permissive (MIT)

Writing custom backdoor payloads with C# - Defcon 27 Workshop

C# 831Updated: 2 y ago License: No License (No License)

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

CSS 831Updated: 2 y ago License: Proprietary (Proprietary)

automotive software(OSEK & AUTOSAR) and its tool-chain

C 829Updated: 2 y ago License: No License (No License)

Linux Binary Exploitation

C 818Updated: 4 y ago License: Permissive (MIT)

The iPhone version of News/YC, a Hacker News reader and interactive iOS application.

Swift 817Updated: 2 y ago License: Proprietary (Proprietary)

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

C 814Updated: 2 y ago License: No License (No License)

Image Payload Creating/Injecting tools

Perl 807Updated: 3 y ago License: Permissive (WTFPL)

Use a Fake image.jpg to exploit targets (hide known file extensions)

Shell 807Updated: 2 y ago License: No License (No License)

Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 14 vulnerability techniques)

C++ 805Updated: 2 y ago License: Permissive (MIT)

XssPy - Web Application XSS Scanner

Python 803Updated: 2 y ago License: Permissive (MIT)

Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。

Python 801Updated: 2 y ago License: No License (No License)

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

Shell 801Updated: 2 y ago License: No License (No License)

hacking-tool termux-tools termux noob-friendly instagram-bot bruteforce-password-cracker wordlist-technique

Python 799Updated: 2 y ago License: Permissive (MIT)

:mag: A Complete Osint Tool

Python 788Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

C 788Updated: 2 y ago License: Permissive (MIT)

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

JavaScript 788Updated: 2 y ago License: No License (No License)

Redis(<=5.0.5) RCE

C 786Updated: 2 y ago License: Permissive (Apache-2.0)

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

Python 785Updated: 2 y ago License: No License (No License)

AndroRAT | Remote Administrator Tool for Android OS Hacking

Java 780Updated: 2 y ago License: No License (No License)

Grab target's webcam shots by link

Shell 776Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

This script grab public report from hacker one and make some folders with poc videos

Shell 775Updated: 2 y ago License: No License (No License)

A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.

PHP 774Updated: 2 y ago License: No License (No License)

Sandboxed Execution Environment

Python 771Updated: 4 y ago License: Permissive (Apache-2.0)

HTTP Botnet

C++ 770Updated: 2 y ago License: Permissive (MIT)

Exploit the credentials present in files and memory

PowerShell 769Updated: 4 y ago License: Proprietary (Proprietary)

For Linux binary Exploitation

C 765Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

C 761Updated: 2 y ago License: Permissive (MIT)

Collection of Scripts for shodan searching stuff.

Python 756Updated: 3 y ago License: Permissive (MIT)

The ARP Scanner

C 753Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Python Wordlist Password Generator for Termux - Hack any fb, instagram, Wifi any Password list - Online Hacking

Python 749Updated: 2 y ago License: Permissive (BSD-3-Clause)

A theme and boot splash manager for the Nintendo 3DS console

C 748Updated: 2 y ago License: Strong Copyleft (GPL-3.0)