Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit known security flaws in server environments such as WebLogic, Struts2, Tomcat, and JBoss. It functions as a remote code execution toolkit and a web shell deployment framework for triggering unauthorized command execution and establishing persistent access on remote systems. The project includes specialized utilities for internal network reconnaissance, specifically using server-side request forgery to scan for open ports and services. It further provides mechanisms for bypassing a
dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels. The project demonstrates a deterministic exploit chain that utilizes functional proofs-of-concept for vulnerabilities in the xfrm-ESP protocol implementation and the RxRPC mechanism. By chaining these memory corruption vulnerabilities, the exploit achieves root access without relying on timing-based race conditions. The tool covers kernel memory manipulation and the development of exploit chains to test local pri
Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate reconnaissance, vulnerability scanning, and exploit verification. It functions as a dockerized security toolkit that coordinates multiple tools into a unified automated pipeline to identify security flaws across network and web assets. The platform features an attack surface manager for discovering internet-facing assets through OSINT, DNS enumeration, and certificate transparency. It distinguishes itself with an AI-powered security analyzer that uses large language models to summarize scan
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.
الميزات الرئيسية لـ bsauce/kernel-exploit-factory هي: Exploitation Frameworks, Vulnerability Exploits.
تشمل البدائل مفتوحة المصدر لـ bsauce/kernel-exploit-factory: zhzyker/exphub — Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit… v4bel/dirtyfrag — dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write… 1n3/sn1per — Sn1per is a vulnerability management platform and penetration testing orchestrator designed to automate… arinerron/cve-2022-0847-dirtypipe-exploit — A root exploit for CVE-2022-0847 (Dirty Pipe). b17fr13nds/kernel-exploits — This is where I'm uploading kernel exploits written by me. archerysec/archerysec — ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.