30 open-source projects similar to wtsxdev/exploit-development, ranked by how many features they have in common. Compare stars, activity and what each one does to find the best Exploit Development alternative.
This project is an offensive security toolkit and development framework for creating memory-safe malware, network scanners, and payload generators. It provides a structured approach to developing exploits, shellcode, and remote access tools. The framework distinguishes itself through the use of no-standard-library environments to generate minimal standalone machine code and shellcode. It also supports the compilation of high-performance logic into WebAssembly for the creation of deceptive web interfaces used in social engineering. Capability areas cover automated vulnerability discovery via
This project is a centralized repository and research database dedicated to the collection of technical documentation and source code concerning offensive security, malware development, and system exploitation. It serves as an archive for security professionals and researchers to study threat actor methodologies and historical security research. The repository functions as a static, version-controlled archive that organizes research papers and code samples into a flat-file directory structure. This approach ensures long-term availability and offline access to the materials, while a decentrali
BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It functions as a platform for security professionals to evaluate client-side defenses by injecting persistent scripts into web browsers, establishing a bidirectional communication channel for remote command execution and data exfiltration. The framework distinguishes itself through its ability to use compromised browser sessions as proxies to conduct internal network reconnaissance, effectively bypassing perimeter security controls. It utilizes an event-driven control interface and
Backdooring PE - Weaponizing Your Favorite PE SEH Egghunter(Manual Encoding) - HP OpenView NNM 7.5 Exploitation
Covenant is a .NET-based command and control framework designed for red team operations and adversary simulation. It serves as a collaborative platform for coordinating security assessments, managing remote implants, and executing tasks on compromised systems through a centralized server. The project is distinguished by its dynamic payload generator, which compiles and obfuscates executable binaries and scripts on the fly to bypass detection. It further separates itself through a collaborative environment that allows multiple authenticated operators to share a synchronized state, track operat
This repository contains a few PowerShell and Python scripts:
Vulnerable software for you to set up your own Buffer Overflow lab
Proof of Concept exploit scripts and fuzzing templates. Companion blog posts located at https://epi052.gitlab.io/notes-to-self/blog/2020-05-13-osce-exam-practice-part-one/
bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)
This is my personal study notes include computer science and mathematics. I hope to motivate myself through this project and its about passionate living and lifelong learning.
What this repo is: After obtaining my OSCP, as preparation for my upcoming OSCE certification I challenged myself to re-write 50 proof of concepts for pre-existing exploits in software, all of which are Windows based.
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Some of the sploits and tools made during my joruney to take on OSCE. Mostly useless..
Jinfeng (Jeffery) Liu
This repo contains a resources that should be followed step by step during the OSCE preperation.
Containing some notes exercises that I've done during my study for the Offensive Security Exploit Developer.
Corelan-Exploit-writing-tutorial-part-1-Stack-Based-Overflows--Exploits-ported-to-Ruby-
Containing my notes, practice binaries solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)
A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29
This is a repository of notes and material that I consider necessary in advance to opt for the course and the OSED certification (Windows User Mode Exploit Development)
XSStrike is an automated security scanning engine designed for web application discovery, input
A repo that tried to centralize the time I learned the introductory to exploit development while studying for the OSCE (Offensive Security Certified Expert) certification.