#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
xalgorix/xalgorixAutonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
zenyxx-xd/rootmyvivoOne-click root for vivo/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU
deancyl/s9180-rootmygalaxyRootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox
61106960/adpeasPowershell tool to automate Active Directory enumeration.
zerbea/hcxtoolsA small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
bittersecurity/decepticonAutonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an…
purpleailab/decepticonAutonomous Hacking Agent for Red Team
commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.
breachsimrange/redteamsimmerWeb-based adversary emulation platform that orchestrates Atomic Red Team tests across Windows endpoints via Go agents, with MITRE ATT&CK mapping, APT…
hacktricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
taniungou/php2shell-labBlack-box pentest lab for the PHP2Shell engine memory-corruption family (CVE-2026-109618 / CVE-2026-109619, CVSS 9.8/9.2). Dual-flag verified attack…
ragnt/angryoxideOffensive 802.11 auditing tool that automates WPA/WPA2 handshake and PMKID capture using deauthentication, rogue-client, and channel-switch attacks,…
karmanya03/overthroneAll-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…
aipentest/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
ed1s0nz/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
ghosttroops/topTOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
securewithumer/exploit-indexZero-API aggregator indexing 150k+ CVE exploits and PoCs from Exploit-DB, Nuclei, Metasploit, and CISA KEV, with EPSS/CVSS risk scoring for threat…
