#1Comprehensive frameworks for exploit development, testing, and execution.
Kitploit recommended
pensarai/apexAI-powered offensive security testing using autonomous agents, directly in your terminal.
0xmarcio/pocindexSearch public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
bishopfox/sliverAdversary Emulation Framework
r0rt1z2/ghostlockKernel root exploit (CVE-2026-43499) for some Amazon devices
hhhrrrttt222111/ethical-hacking-toolsComplete Listing and Usage of Tools used for Ethical Hacking
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
aflplusplus/libaflAdvanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
freelabz/secatorsecator - the pentester's swiss knife
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
angr/angrA powerful and user-friendly binary analysis platform!
berylliumsec/nebulaAI-powered penetration testing assistant that automates reconnaissance, vulnerability analysis, and note-taking via integrated LLMs and CLI tool…
xalgord/xalgorixAutonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
yukonga/ghostlock-appGhostLock One-Tap Execution App (CVE-2026-43499)
