#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
0xinfection/tidos-frameworkThe Offensive Manual Web Application Penetration Testing Framework.
xairy/vmware-exploitationA collection of links related to VMware escape exploits
hakluke/weaponised-xss-payloadsXSS payloads designed to turn alert(1) into P1
dirkjanm/cve-2020-1472PoC for Zerologon - all research credits go to Tom Tervoort of Secura
nhas/reverse_sshSSH-based reverse shell management tool with native SCP/SFTP support, multiple transport protocols, Windows DLL generation, and fileless execution…
christophetd/log4shell-vulnerable-appSpring Boot web application vulnerable to Log4Shell (CVE-2021-44228).
gamehunterkaan/autopwn-suiteAutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
bohops/ultimatewdacbypasslistA centralized resource for previously documented WDAC bypass techniques
reajason/memshellparty一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率
sweetsoftware/aresPython botnet and backdoor
harishsg993010/damn-vulnerable-mcp-serverDamn Vulnerable MCP Server
bats3c/shad0wA post exploitation framework designed to operate covertly on heavily monitored environments
nicholasaleks/damn-vulnerable-droneDamn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a…
notselwyn/cve-2024-1086Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including…
ascotbe/medusa🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中
koutto/jok3rJok3r v3 BETA 2 - Network and Web Pentest Automation Framework
d35m0nd142/lfisuiteTotally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
egebalci/sgnPolymorphic binary encoder for offensive security payloads. Encodes shellcode with LFSR-based feedback loop, garbage instruction injection, and…
