#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
b23r0/heroinnA cross platform C2/post-exploitation framework.
itm4n/pentest-windowsCollection of Windows internals research and exploitation techniques covering privilege escalation, token abuse, and post-exploitation tricks for red…
p-e-w/hereticFully automatic censorship removal for language models
karmanya03/overthroneAll-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…
grisuno/lazyownRed team framework and multi-operator C2 platform with AI agents, malleable implants, rootkits, phishing engine, and 741 CLI commands covering the…
securewithumer/cve-2026-pocsExploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and…
tekkenbugattii/linusware-source-code-internalReverse-engineered runtime engine for Roblox/Luau with VM hooking, opcode remapping, capability escalation, and UNC script environment for executing…
ghxstsec/php2shell-pocPython exploit for CVE-2026-109618: abuses PHP session.upload_progress heap corruption to overwrite zend_call_function and achieve remote command…
1ndevelopment/ghostlock-s26GhostLock (CVE-2026-43499) app for the Galaxy S26 series
azeemidrisi/phonesploit-proAn all-in-one hacking tool to remotely take over Android devices.
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
tihanyin/rex-skillREx@Skill - Agentic Reverse Engineering eXecution Skill for binary vulnerability discovery
blacktop/ipswiOS/macOS Research Swiss Army Knife
9bie/php2shell-bypass-aslr-expPure-HTTP exploit achieving RCE on PHP 8.4.26 + Apache mod_php via session upload_progress heap leak, dangling pointer reuse, and ASLR bypass to call…
ccp-p/ghostlock-cve-2026-43499-4.19-k40Android kernel LPE PoC for CVE-2026-43499, an rtmutex use-after-free in 4.19 Qualcomm kernels, adapted for Redmi K40 with LD_PRELOAD root payload.
tomer8007/widevine-l3-decryptorA Chrome extension that demonstrates bypassing Widevine L3 DRM
bishopfox/sliverAdversary Emulation Framework
