#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended

The repo contains a series of challenges for learning Frida for Android Exploitation.
Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

Educational reconstruction of the Stuxnet worm for malware analysis and defensive research. Includes modules for privilege escalation, rootkit…

Burp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, expression language injection, shellshock and…

Exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo, enabling local privilege escalation. Includes target list and…

Hide your Powershell script in plain sight. Bypass all Powershell security features

Practice Go programming and implement CobaltStrike's Beacon in Go

Crack any Microsoft Windows users password without any privilege (Guest account included)

LoadLibrary for offensive operations

A Modular Penetration Testing Framework

A malicious LDAP server for JNDI injection attacks

DCOM-based privilege escalation tool for Windows Server 2012-2022 and Windows 8-11, elevating users with ImpersonatePrivilege to NT AUTHORITY\SYSTEM…

A root exploit for CVE-2022-0847 (Dirty Pipe)

Windows privilege escalation discovery tool that parses Process Monitor boot logs to identify DLL hijacking, weak ACLs, and other elevation paths,…

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

This program is designed to demonstrate various process injection techniques

A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.