#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
bytecode77/r77-rootkitFileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
devploit/awesome-ctf-resourcesA list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩
enjoiz/xxeinjectorTool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
mandatoryprogrammer/xsshunterThe XSS Hunter service - a portable version of XSSHunter.com
jthuraisamy/syswhispers2AV/EDR evasion via direct system calls.
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
xtr4nge/fruitywifiFruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages.…
welk1n/jndi-injection-exploitJNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）
ssh-mitm/ssh-mitmSSH-MITM - ssh audits made simple
p0dalirius/awesome-rce-techniquesAwesome list of step by step techniques to achieve Remote Code Execution on various apps!
ax/apk.shMakes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.
bastilleresearch/mousejackResearch tools for MouseJack vulnerabilities in nRF24L01 wireless devices, including device discovery, packet sniffing, network mapping, and firmware…
neex/phuip-fpizdamExploit for CVE-2019-11043
mrwadams/stride-gptAn AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE…
bsauce/kernel-exploit-factoryLinux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment…
eonraider/violent-python3Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…
freelabz/secatorsecator - the pentester's swiss knife
