Topics / #exploit-development

Exploit-development projects on GitHub

Developing exploits with debuggers, shellcode, and vulnerability research.

As of , the most-starred Exploit-development projects on GitHub are x64dbg (49.9K stars), h4cker (29.8K stars) and Awesome-Hacking-Resources (17.5K stars). GitHub.Locker tracks 15 Exploit-development repositories with 140.8K stars combined. The fastest-growing on October 16 was Relapse-Exploit, with +52 stars in a day.

15Projects
140.8KStars in total
+157Stars in a day
Browse in the catalog →github.com/topics/exploit-development ↗

Hot right now

Most stars gained in a day · Oct 16

+52

Relapse-Exploit

ntfargo/Relapse-Exploit · ★ 2.3K

Relapse Exploit is a browser-based jailbreak chain for the PS5, working on firmware 7.00 through 13.60, that chains a WebKit browser exploit with a kernel exploit to gain kernel read/write and load custom payloads.

+21

ps5-webkit-autoloader

itsPLK/ps5-webkit-autoloader · ★ 1.1K

It is an automated payload loader for exploited (jailbroken) PS5 consoles: it boots the WebKit exploit chain and then sends your ELF payloads automatically, all triggered from a homescreen shortcut on the console itself.

+17

h4cker

The-Art-of-Hacking/h4cker · ★ 29.8K

A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

+16

x64dbg

x64dbg/x64dbg · ★ 49.9K

x64dbg is an open-source user-mode debugger for Windows, built specifically for reverse engineering and malware analysis.

The all-time top

15 projects · by stars

  1. #1 · x64dbg/x64dbg

    x64dbg

    x64dbg is an open-source user-mode debugger for Windows, built specifically for reverse engineering and malware analysis.

    49.9K
  2. #2 · The-Art-of-Hacking/h4cker

    h4cker

    A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

    29.8K
  3. #3 · vitalysim/Awesome-Hacking-Resources

    Awesome-Hacking-Resources

    A curated collection of hacking, penetration testing and AI red-teaming resources — courses, YouTube channels, CTF platforms and guides, picked to make you better at offensive security.

    17.5K
  1. 4

    nuclei-templates

    13.1Kprojectdiscovery/nuclei-templates · JavaScript

    This is a community-curated collection of over 11,000 detection templates for the Nuclei vulnerability scanner, covering CVEs, misconfigurations, exposed panels, and other security issues.

  2. 5

    pwndbg

    11.1Kpwndbg/pwndbg · Python

    A plug-in for GDB and LLDB that makes debugging far less painful for low-level developers, hardware hackers, reverse-engineers and exploit developers — it adds the utilities vanilla debuggers are missing.

  3. 6

    exploitarium

    5.2Kbikini/exploitarium · Python

    Exploitarium is a single consolidated archive of the author's public proof-of-concept exploits and vulnerability research writeups, merging dozens of their former standalone PoC repos into one place.

  4. 7

    dirtyfrag

    5.1KV4bel/dirtyfrag · C

    Dirty Frag is a proof-of-concept Linux kernel local privilege escalation exploit that chains two page-cache write vulnerabilities (CVE-2026-43284 and CVE-2026-43500) to obtain root on major Linux distributions.

  5. 8

    mantis

    2.5Kgoogle/mantis · Python

    Mantis is a toolkit of skills plus a reference agent harness (built on Google's ADK) that lets AI coding agents autonomously find, reproduce, triage, and patch vulnerabilities in a codebase.

  6. 9

    Relapse-Exploit

    2.3Kntfargo/Relapse-Exploit · JavaScript

    Relapse Exploit is a browser-based jailbreak chain for the PS5, working on firmware 7.00 through 13.60, that chains a WebKit browser exploit with a kernel exploit to gain kernel read/write and load custom payloads.

  7. 10

    skitter-creek-bath-salts

    2.1Kxoreaxeaxeax/skitter-creek-bath-salts · C

    A security research project that shows how to unlock protected regions on an AMD CPU — the Platform Security Processor, System Management Mode, C6 DRAM, and CPU microcode — by scrambling the DRAM controller's physical-to-DRAM address translation.

  8. 11

    ps5-webkit-autoloader

    1.1KitsPLK/ps5-webkit-autoloader · JavaScript

    It is an automated payload loader for exploited (jailbroken) PS5 consoles: it boots the WebKit exploit chain and then sends your ELF payloads automatically, all triggered from a homescreen shortcut on the console itself.

  9. 12

    FilzaSlop

    4510xjohnnydev/FilzaSlop · Objective-C

    FilzaSlop is a fork of FilzaJailedDS that adds a sandbox escape exploit and app container access to the Filza file manager on iOS 18, iOS 26, and iOS 27 beta 1-4, plus a bundled PosterBoard Wallpaper Lab.

  10. 13

    bad_query

    276forcequitOS/bad_query · C

    badquery is a proof-of-concept sandbox escape for iOS 26 and 27, written in C — code that demonstrates breaking out of the iOS app sandbox.

  11. 14

    Erosion

    245jailbreakdotparty/Erosion · Swift

    Erosion is an iOS customization toolbox that uses the bad_query sandbox escape exploit to apply tweaks on supported iOS/iPadOS versions, no traditional jailbreak required.

  12. 15

    UniRoot

    229kuuky29/UniRoot · Kotlin

    UniRoot is a one-tap rooting app for Samsung Galaxy devices. It ships a new unprivileged kernel exploit (DirtyFrag, CVE-2026-43284) that roots the phone with a single button press, plus an older CVE-2026-43499-based exploit with per-device profiles, and it automatically re-roots the device on every boot.

Often tagged together