advisories

awesome-exploit-development

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

bludit-3.13.1-tags-field-stored-cross-site-scripting-xss

CVE-2021-45744 - A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Application stores attacker injected dangerous JavaScript in to the database and executes without validating.

bookstore

This is the BookStore app with Google Books Api

bookstoreapp

BookStore App with GoogleBooksApi

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

celery

Distributed Task Queue (development branch)

chattingapp

Chatting App using Flutter and Firebase

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cve-2019-18634

My n-day exploit for CVE-2019-18634 (local privilege escalation)

cve-2019-8449

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

cve-2022-38813

Authenticated Vertical Privilege Escalation Vulnerability in Blood Donor Management System

cve-2022-40470

Cross Site Scripting in Blood Donor Management System Using CodeIgniter - 1.0

cve-2022-40471

RCE Exploit and Research

cve-2022-41445

Cross Site Scripting in Teacher's Record Management System using CodeIgnitor

cve-2022-41446

Privilege Escalation in Teachers Record Management System using CodeIgnitor

cve-2022-43117

cve-2022-44830

exploit-development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

flask-authentication

The Flask Authentication with Validation,\

ghidra

Ghidra is a software reverse engineering (SRE) framework

linuxflaw

This repo records all the vulnerabilities of linux software I have reproduced in my local workspace

mailtrain

Self hosted newsletter app

matomo

Liberating Web Analytics. Star us on Github? +1. Matomo is the leading open alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. We love Pull Requests!

minimist

parse argument options

mysql-5.6

Facebook's branch of the Oracle MySQL database. This includes MyRocks.

mysql-remote-root-code-execution

0ldSQL_MySQL_RCE_exploit.py (ver. 1.0) (CVE-2016-6662) MySQL Remote Root Code Execution / Privesc PoC Exploit For testing purposes only. Do no harm.

openmct

A web based mission control framework.

peekaboo

PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.

pencrypt-the-pentesting-framework

Pencrypt: a Framework for Web, Linux, Windows Pentesting and Cryptographic Operations, Exploit Development and Reverse Engineering, Malware Analysis