Awesome GitHub RepositoriesExploit Payloads

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

Pwntools is a Python-based framework designed for rapid prototyping and automation in binary exploitation, reverse engineering, and security research. It serves as a comprehensive toolkit for interacting with local and remote processes, providing the primitives necessary to manage complex exploit workflows and streamline security analysis tasks. The framework distinguishes itself through its specialized capabilities for binary manipulation and automated exploit construction. It includes dedicated utilities for parsing executable file formats, assembling and disassembling machine code, and gen

fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides collections of strings and payloads used to discover hidden files, subdomains, and security vulnerabilities. The project includes specialized libraries for different security testing vectors, such as dictionaries for common request and cookie parameters, lists of common subdomain prefixes, and collections of passwords and default vendor credentials for brute-force testing. It also maintains a security payload library containing character sequences used to identify flaws like SQL i

This project is a bug bounty resource directory, vulnerability research cheatsheet, and web security payload library. It serves as a centralized collection of curated payloads and common attack vectors used to identify security vulnerabilities in web applications. The repository provides a directory of platforms, books, and tools to support vulnerability discovery skills. It includes a reference for tested payloads and techniques used to trigger bugs and identify vulnerabilities during security audits. The content covers web application pentesting, security vulnerability testing, and general

Peda este o suită de instrumente de securitate și un framework de dezvoltare a exploit-urilor conceput pentru analiză binară, automatizarea debugger-ului și inspecția memoriei. Acesta funcționează ca un set de scripturi Python care extind un debugger pentru a automatiza analiza fișierelor compilate și inspecția memoriei proceselor. Proiectul oferă utilitare specializate pentru cercetarea coruperii memoriei, inclusiv un utilitar de generare a payload-urilor pentru crearea de tipare ciclice în vederea descoperirii buffer overflow-urilor și un gadget finder pentru a localiza secvențe de return-oriented programming (ROP) în binare. Se diferențiază oferind un instrument de vizualizare care transformă datele brute din registre, dezasamblare și memorie în text colorat pentru a simplifica analiza stărilor CPU. Framework-ul acoperă o gamă largă de capabilități, inclusiv analiza de securitate binară pentru detectarea protecțiilor, scanarea memoriei prin expresii regulate și capacitatea de a mapa mediile proceselor direct din kernel-ul sistemului. Include, de asemenea, instrumente pentru modificarea adreselor de memorie și generarea de șabloane de shellcode.

w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing