Awesome GitHub RepositoriesExploit Development

The framework is a comprehensive penetration testing platform designed for the development, testing, and execution of security exploits. It serves as a research toolkit and automated assessment environment, enabling security professionals to identify and validate vulnerabilities within networked systems and infrastructure through repeatable, standardized procedures. The platform distinguishes itself through a modular architecture that supports reflective payload injection, allowing for the execution of code directly in memory without writing to disk. It utilizes an asynchronous event loop to

Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow

PEASS-ng is a Linux privilege escalation scanner and post-exploitation enumeration tool. It identifies security vulnerabilities and misconfigurations on Linux systems that could lead to unauthorized elevated access. The tool functions as a security audit utility that discovers system weaknesses and sensitive information after initial access is gained. It scans operating systems to identify specific privilege escalation paths. Findings are converted into structured security audit reports. The tool supports exporting scan results into JSON, HTML, and PDF formats for formal analysis and documen

Pwntools is a Python-based framework designed for rapid prototyping and automation in binary exploitation, reverse engineering, and security research. It serves as a comprehensive toolkit for interacting with local and remote processes, providing the primitives necessary to manage complex exploit workflows and streamline security analysis tasks. The framework distinguishes itself through its specialized capabilities for binary manipulation and automated exploit construction. It includes dedicated utilities for parsing executable file formats, assembling and disassembling machine code, and gen

windows-kernel-exploits Windows平台提权漏洞集合

how2heap is an educational resource and technical testbed for learning heap-based vulnerabilities and memory allocator internals. It provides a collection of source code examples and binaries that serve as a laboratory for studying memory corruption techniques specifically targeting the glibc malloc implementation. The project focuses on the development of exploit primitives, such as tcache poisoning and double frees, to redirect program execution. It includes a suite of implementations for bypassing memory protections and manipulating heap metadata to achieve arbitrary memory writes. The fr

LinEnum is a suite of security utilities for auditing Linux systems, scanning for privilege escalation paths, and enumerating local vulnerabilities. It functions as a system security audit tool, a local enumeration utility, and a scanner for identifying misconfigurations that could allow a user to gain root access. The project includes specialized auditing for containerized environments, specifically detecting Docker and LXC signatures to identify potential escape vectors to the host system. Its broader capabilities cover the analysis of kernel versions, the identification of SUID binaries a

UACME is a set of specialized tools designed to audit security configurations, escalate user privileges, and circumvent access control restrictions on Windows systems. It functions as a utility for executing commands with elevated privileges by bypassing User Account Control restrictions. The project includes a configuration auditor used to extract and analyze system settings to identify security misconfigurations and vulnerabilities. It provides a collection of techniques for gaining administrative rights on a host. The toolset covers a wide range of privilege escalation and security auditi

linux-exploit-suggester is a diagnostic utility and vulnerability scanner designed to identify potential kernel exploits on Linux systems. It functions as a privilege escalation auditor by matching system information and kernel versions against a database of known security flaws. The tool differentiates itself by filtering and ranking exploits based on specific system properties and runtime security configurations. It evaluates kernel hardening settings, such as memory protection mechanisms, to discard inapplicable exploits and prioritize candidates by their probability of success. The softw

Peda is a security tool suite and exploit development framework designed for binary analysis, debugger automation, and memory inspection. It functions as a set of Python scripts that extend a debugger to automate the analysis of compiled files and the inspection of process memory. The project provides specialized utilities for memory corruption research, including a payload generation utility for creating cyclic patterns to discover buffer overflows and a gadget finder to locate return-oriented programming sequences within binaries. It differentiates itself by offering a visualization tool th

linux-kernel-exploits Linux平台提权漏洞集合

यह प्रोजेक्ट विंडोज भेद्यता मूल्यांकन और पैच प्रबंधन ऑडिटिंग के लिए विशेष यूटिलिटीज का एक सेट है। यह एक भेद्यता स्कैनर और एक्सप्लॉइट सजेस्टर के रूप में कार्य करता है जो गायब सुरक्षा पैच और उनकी संबंधित ज्ञात कमजोरियों की पहचान करने के लिए इंस्टॉल किए गए अपडेट का विश्लेषण करता है। यह सिस्टम विशिष्ट सार्वजनिक रूप से उपलब्ध एक्सप्लॉइट्स की सिफारिश करने के लिए एक समेकित भेद्यता डेटाबेस के विरुद्ध गायब अपडेट का मिलान करके खुद को अलग करता है। यह पैच सुपरसीडेंस को संभालने और गलत सकारात्मक परिणामों को खत्म करने के लिए आधिकारिक अपडेट कैटलॉग के विरुद्ध पहचाने गए अंतराल को क्रॉस-रेफरेंस करके और रिमोट सुरक्षा बुलेटिनों को स्थानीय डेटाबेस में सिंक्रोनाइज़ करके सटीकता बनाए रखता है। यह टूल सुरक्षा सतह विश्लेषण के लिए क्षमताएं प्रदान करता है, जिससे उपयोगकर्ताओं को गंभीरता-आधारित फिल्टरिंग और इंस्टॉलेशन तिथि परिशोधन के माध्यम से उच्च-जोखिम वाले अंतरालों को प्राथमिकता देने की अनुमति मिलती है। इसमें कई रिमोट स्रोतों से सुरक्षा परिभाषा अपडेट के संग्रह और सिंक्रोनाइज़ेशन के लिए एक डेटाबेस क्लाइंट भी शामिल है।

dirtyfrag, Linux कर्नल विशेषाधिकार वृद्धि के लिए एक प्रूफ-ऑफ़-कांसेप्ट एक्सप्लॉइट है। यह उपयोगकर्ता अनुमतियों को प्रशासनिक रूट स्तरों तक बढ़ाने के लिए पेज-कैश राइट कमजोरियों को लक्षित करता है। यह प्रोजेक्ट एक नियतात्मक एक्सप्लॉइट चेन प्रदर्शित करता है जो xfrm-ESP प्रोटोकॉल इम्प्लीमेंटेशन और RxRPC तंत्र में कमजोरियों के लिए कार्यात्मक प्रूफ-ऑफ़-कांसेप्ट का उपयोग करता है। इन मेमोरी भ्रष्टाचार कमजोरियों को जोड़कर, एक्सप्लॉइट टाइमिंग-आधारित रेस कंडीशंस पर भरोसा किए बिना रूट एक्सेस प्राप्त करता है। यह टूल कर्नल मेमोरी हेरफेर और स्थानीय विशेषाधिकार वृद्धि का परीक्षण करने और Linux भेद्यता अनुसंधान करने के लिए एक्सप्लॉइट चेन के विकास को कवर करता है।

This project is a proof of concept implementation for CVE-2026-31431, serving as a local privilege escalation tool for the Linux kernel. It functions as an exploit that allows a standard user account to obtain root permissions. The tool demonstrates a kernel page cache attack, where root access is achieved by writing shellcode into the cached pages of a privileged binary. This process manipulates how the Linux kernel handles page caches to execute code with elevated permissions. The repository covers areas of Linux security research, including kernel memory corruption analysis and local priv

Unicorn is a collection of utilities for generating malicious HTA files, VBA macros, encoded PowerShell commands, and memory-resident shellcode injection frameworks. It provides tools to create payloads designed to achieve remote code execution by bypassing security controls. The project focuses on weaponizing office documents through VBA macros and formulas, generating HTA attack vectors, and creating encoded PowerShell payloads. It includes a shellcode injection framework to wrap external shellcode for direct execution in system memory. The toolkit covers binary-to-base64 conversion for ce

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

UAC bypass, Elevate, Persistence methods

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.