zhzyker/exphub

Features

• Remote Code Execution Tools - Provides a toolkit designed to achieve and manage arbitrary code execution on remote target systems.
• Vulnerability Proofs of Concept - Provides a library of executable proof-of-concept scripts to demonstrate the exploitability of specific CVEs.
• Port Scanning - Identifies active hosts and open services on internal networks by leveraging SSRF vulnerabilities.
• Port Scanning Tools - Identifies open ports and network services within internal networks using server-side request forgery.
• Proof Of Concept Exploits - Maintains a collection of security research and functional exploit code for various CVEs.
• Software Vulnerability Exploits - Provides a library of proof-of-concept exploits targeting enterprise server environments.
• Vulnerability Exploitation Frameworks - Provides a framework for detecting and exploiting security flaws in middleware and application frameworks.
• Web Application Exploits - Employs specialized payloads to verify web-layer vulnerabilities and gain unauthorized server access.
• Web Shells - Deploys web shells to compromised servers to establish persistent remote access and command control.
• Web Shell Executions - Deploys scripts on compromised servers to create permanent HTTP interfaces for remote command execution.
• Deployment Frameworks - Provides a framework for uploading and establishing persistent web-based backdoors on remote compromised systems.
• Remote Command Execution - Triggers unauthorized arbitrary command execution on target systems by leveraging deserialization or plugin flaws.
• Deserialization Exploits - Implements attacks that execute arbitrary commands via serialized object reconstruction in server environments.
• Exploit Payload Deployments - Ships mechanisms for transferring and executing offensive exploit payloads on remote target systems.
• Network Vulnerability Scanning - Uses server-side request forgery to identify open ports and services on a local network.
• Penetration Testing Frameworks - Provides an automated framework for discovering and exploiting security weaknesses in enterprise software.
• Proof of Concept Execution - Runs curated proof-of-concept scripts to verify and exploit security flaws across various software environments.
• Web Shells - Uploads and executes a script on a remote server to establish persistent access and command control.
• Vulnerability Detection - Checks target servers for known remote command execution vulnerabilities using proof-of-concept scripts.
• Command Injection Exploiters - Automates the exploitation of command injection vulnerabilities to execute arbitrary commands on target servers.
• Vulnerability Exploits - Executes proof-of-concept exploits to confirm the presence of security flaws in server environments like JBoss.
• Port Scanners - Identifies open network ports and services by leveraging server-side request forgery.
• Access Control Bypasses - Implements mechanisms to modify credentials or exploit privilege escalation to gain unauthorized entry.
• Automated Vulnerability Detection - Scans target URLs to automatically identify security weaknesses and known vulnerabilities in web services.
• Path Traversal Exploits - Provides capabilities to read sensitive system files by escaping directory constraints via path manipulation.
• Remote Code Execution Testing - Analyzes target software to detect vulnerabilities that allow an attacker to execute arbitrary remote code.
• SSRF-Based Reconnaissance - Includes specialized utilities to scan internal network ports and services using server-side request forgery.
• Network Reconnaissance Tools - Scans internal networks to identify active services and potential entry points using SSRF.
• Directory Traversal Exploits - Accesses sensitive files from target servers by exploiting path traversal and unauthorized reading flaws.
• Arbitrary File Uploads - Provides capabilities to upload unauthorized files to remote servers to achieve remote code execution.
• Security References - Repository of exploit proof-of-concepts.
• Vulnerability Exploitation - Centralized repository for various application server exploits.

Star history