[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

 How to buy exploit? Two ways to buy required exploit. Currency, that we accept.

  1. Anonymous buying of exploits is the way to buy exploit without registration. You buy it directly and anonymous and get exploit on mail.
  2. Another way to buy exploits is to became 0day.today user, get 0day.today Gold and buy required exploit in our database.
               
We accept Crypto Currencies: [contact admin to find more]

  What is 0day.today Gold? How to buy Gold? How to earn Gold?

  • 0day.today Gold is the currency of 0day.today project. It used for paying for the services, buying exploits, earning money, etc.
  • You can buy Gold: exchange money to Gold
  • You can earn Gold: selling exploits, helping with cracking hashes, etc.
               
We accept Crypto Currencies: [contact admin to find more]

  How to sell exploits? Earning 0day.today Gold.

  1. To sell exploits on 0day.today exploits database you need to be registered user. You can login or register
  2. You need to found new unique vulnerability or 0day exploit. Create description, make approve video, screenshots, other useful information.
  3. Publish it on our database site, wait for cheking it by 0day.today Administration. Then wait for customers and earn money!
  4. You also can make it more popular with Highlight service.
  5. After you earn the 0day.today Gold you can get it out from the system to payment ystem, that you use.
Search:              Extended search

[ local exploits ]

Local exploits and vulnerabilities category


A "local exploit" requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with client application.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
4 196
Security Risk High
R
D
Download
C
CVE-2015-2023
Verified by 0day Admin
free
You can open this exploit for free
hyp3rlinx
Exploits:
253
BusinessLevel:
17
5 313
Security Risk High
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
bot
Exploits:
152
BusinessLevel:
13
5 221
Security Risk High
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
bot
Exploits:
152
BusinessLevel:
13

[ web applications ]

Webapplication (webapps) exploits and vulnerabilities category


This category is full with vulnerabilities, which was found in web projects and web applications.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
3 707
Security Risk Critical
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
LiquidWorm
Exploits:
718
BusinessLevel:
45
4 173
Security Risk High
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
panVagenas
Exploits:
5
BusinessLevel:
4
3 461
Security Risk High
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Sajjad Sotoudeh
Exploits:
2
BusinessLevel:
4
3 471
Security Risk High
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Rahul Pratap Singh
Exploits:
9
BusinessLevel:
5
3 125
Security Risk Medium
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
Onur YILMAZ
Exploits:
1
BusinessLevel:
4

[ shellcode ]

Shellcode category


In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode. Because the function of a payload is not limited to merely spawning a shell, some have suggested that the name shellcode is insufficient. Shellcode is commonly written in machine code.

Classification:
There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with a client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with the social engineering method. Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples. Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root. Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete until newer versions of the software become available Shellcodes any types.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
10 780
Security Risk Medium
R
D
Download
-
Verified by 0day Admin
free
You can open this exploit for free
David Velázquez
Exploits:
2
BusinessLevel:
4