This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

Exploitation Framework for Embedded Devices

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Linux privilege escalation auditing tool

Decrypted content of eqgrp-auction-file.tar.xz

📦 Make security testing of K8s, Docker, and Containerd easier.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

A list of resources in different fields of Computer Science

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

Find exploits in local and online databases instantly

Miscellaneous exploit code

OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

A Ruby framework designed to aid in the penetration testing of WordPress systems.