exploit-code 开源项目推荐（54 个）

ihack4falafel /OSCE

Collection of things made during my preparation to take on OSCE

CroodSolutions /AutoPwnKey

AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. It is our hope that this tool will be useful to red teams over the short term, while over the long term help AV/EDR vendors improve how they handle AHK scripts.

BishopFox /cve-2016-1764

Recovery of Plaintext iMessage Data Without Breaking Crypto

SecureWithUmer /Exploit-Index

Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.

ihack4falafel /OSEE

Collection of things made during my preparation to take on OSEE

mirchr /security-research

Security Research

SadFud /Exploits

Real world and CTFs exploiting web/binary POCs.

ihack4falafel /Slink

Alphanumeric Shellcode (x86) Encoder

psc4re /quick-scripts

A collection of my quick and dirty scripts for vulnerability POC and detections

Lazenca /Exploit-tech

Example files to experience basic exploit techniques.

mufeedvh /CVE-2019-8449

CVE-2019-8449 针对 Jira v2.1 - v8.3.4 的漏洞利用

incredibleindishell /PHP-web-shells

when i started web application security testing, i fall in love with web shell development and designed some PHP based web shells. This repository contains all my codes which i released in public.

KaoRz /exploits_challenges

Challenges and vulnerabilities exploitation.

mikaelkall /Exploits

Exploits developed by Mikael Kall

BishopFox /coldfusion-10-11-xss

Proof of Concept code for CVE-2015-0345 (APSB15-07)

PinkP4nther /Shellcodes

I'll post my custom shellcode I make here!

tc4dy /CVE-2026-0073-PoC-Exploit

CVE-2026-0073 – Android ADB Wireless Debugging Auth Bypass (CVSS 8.8) | Zero-click TLS type confusion to unauthenticated shell. 2 tools: Full Exploit (ADB shell, cmd exec, subnet scan, mDNS, stealth, SOCKS5) & SafeDetect (non-intrusive audit, CIDR, JSON/CSV/HTML). Red/Blue team toolkit. Ethical & Safety use only.

ShadowEye /envisioncollision

Getting Envisioncollision to actually work.

tc4dy /CVE-2026-87902-Toolkit

CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7–7.1.1. | 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). Use Ethically & Authorized Enviorement, Stay Legal <3

ricardojoserf /vulnserver-exploits

Vulnserver 漏洞利用