A powerful and automated XML-RPC vulnerability Scanner and Exploitation script written in Python.

December 23, 2024 - Webhook Manipulation: The code dynamically requests a "webhook" from the user and embeds it into Python files like `Comet.py` and `Exela.py.’ Information Theft: Steals tokens, passwords, and accounts from various platforms (Discord, Steam, Instagram, Twitter, etc.) Anti-VM Detection: Virtualization environments to evade analysis or sandboxing. Dynamic File Modification: The scripts modify Python files at runtime, a method that can enable malicious code injection for exploitation during execution.

By understanding SQL injection, utilizing Python for automation, and mastering key penetration testing tools, you’ll be equipped to assess, exploit, and protect web applications, systems, and networks. Through real-world applications, the course also explores Python’s role in ethical hacking, enabling you to script customized tools and automate attacks.

April 3, 2025 - This error in memory allocation and management can be exploited by forcing the application to attempt to store more data in an allocated buffer than actually fits, typically through providing a very large user input. Python code can be applied to exploitation of a buffer overflow vulnerability in a couple of different ways.

This module exploits an out of bounds function table dereference in the SMB request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7 release candidates (not RTM), and Windows 2008 Server prior to R2.

November 15, 2019 - Another dangerous Python function is str.format(). If an application uses str.format() on a user-controlled format string, an attacker might be able to access arbitrary data of the program via crafted format strings. This is an easy-to-exploit and severe vulnerability that leads to authentication bypass and leaks of confidential data.

You will focus also on the EternalBlue exploit, which affected many Windows operating system versions. Second, you will see how you can create a keylogger application, capable of recording the keystrokes of the victim, as well as taking screenshots from the target’s computer. Finally, you will discover how you can execute shellcode using Python, and how to enhance a malware to detect anti-malware sandboxing techniques and evade them.

March 25, 2026 - The attackers used a known Python exploit that automatically executes hidden scripts the moment the Python interpreter starts. Your team does not even have to import the compromised library.

December 10, 2023 - We’ll be your companions on a journey where we unravel the secrets of Python libraries made for website exploit scripting. We’ll explore tools that help security experts, testers, and ethical hackers do their thing.

December 6, 2023 - When user input is used directly without validation, an attacker can enter Python code as input, and the application executes it. For instance, take a look at this example: 1user_input = input("Enter your username: ") 2query = "SELECT * FROM ...

This repository is the python exploits collection made by the author for educational purposes.

Track the latest Python vulnerabilities and their associated exploits, patches, CVSS and EPSS scores, proof of concept, links to malware, threat actors, and MITRE ATT&CK TTP information

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session. android python hack adb exploit hacking cybersecurity penetration-testing pentesting android-debug-bridge ...

April 10, 2024 - The first thing to do was write a proof of concept. The goal was to write some exploit code that would overwrite NSEH and SEH with a controlled value. That way I would know this exploit path is viable. To do this, I wrote a fuzzer script in Python to make HTTP request for me and submit a bunch of junk data.

To begin with, we setup a custom multi/handler to catch the custom exploit we generated by Veil as shownfollowing. Keep in mind, I used 443 for the local port because it bypasses most HIPS and the local host will change depending on your host. Now, we need to generate custom payloads with Veil to be used with the psexec module. You can do this by navigating to the Veil-Evasion installation directory and running it with python Veil-Evasion.py.

The Exploit Database - Exploits, Shellcode, 0days, Remote Exploits, Local Exploits, Web Apps, Vulnerability Reports, Security Articles, Tutorials and more.

February 26, 2026 - Most can run Python code, though. Thanks to the streamlined tooling like VS Code. So, let me show you how to take a request from Burp’s Repeater or Intruder tool that demonstrates a vulnerability and turn it into a PoC exploit in Python.