Awesome GitHub RepositoriesExploit Payloads

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

Pwntools is a Python-based framework designed for rapid prototyping and automation in binary exploitation, reverse engineering, and security research. It serves as a comprehensive toolkit for interacting with local and remote processes, providing the primitives necessary to manage complex exploit workflows and streamline security analysis tasks. The framework distinguishes itself through its specialized capabilities for binary manipulation and automated exploit construction. It includes dedicated utilities for parsing executable file formats, assembling and disassembling machine code, and gen

fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides collections of strings and payloads used to discover hidden files, subdomains, and security vulnerabilities. The project includes specialized libraries for different security testing vectors, such as dictionaries for common request and cookie parameters, lists of common subdomain prefixes, and collections of passwords and default vendor credentials for brute-force testing. It also maintains a security payload library containing character sequences used to identify flaws like SQL i

This project is a bug bounty resource directory, vulnerability research cheatsheet, and web security payload library. It serves as a centralized collection of curated payloads and common attack vectors used to identify security vulnerabilities in web applications. The repository provides a directory of platforms, books, and tools to support vulnerability discovery skills. It includes a reference for tested payloads and techniques used to trigger bugs and identify vulnerabilities during security audits. The content covers web application pentesting, security vulnerability testing, and general

Peda ist eine Sicherheits-Tool-Suite und ein Exploit-Development-Framework für Binäranalyse, Debugger-Automatisierung und Speicherinspektion. Es fungiert als eine Reihe von Python-Skripten, die einen Debugger erweitern, um die Analyse kompilierter Dateien und die Inspektion des Prozessspeichers zu automatisieren. Das Projekt bietet spezialisierte Dienstprogramme für die Forschung zu Speicherfehlern, einschließlich eines Payload-Generators zur Erstellung zyklischer Muster, um Pufferüberläufe zu entdecken, sowie eines Gadget-Finders, um Return-Oriented-Programming-Sequenzen (ROP) innerhalb von Binärdateien zu lokalisieren. Es unterscheidet sich durch ein Visualisierungstool, das rohe Register-, Disassembly- und Speicherdaten in farbcodierten Text umwandelt, um die Analyse von CPU-Zuständen zu vereinfachen. Das Framework deckt ein breites Spektrum an Funktionen ab, einschließlich binärer Sicherheitsanalyse zur Erkennung von Schutzmechanismen, regulärer Speicherscans und der Fähigkeit, Prozessumgebungen direkt aus dem System-Kernel abzubilden. Es enthält zudem Tools zur Modifikation von Speicheradressen und zur Generierung von Shellcode-Vorlagen.

w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing