#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
frohoff/ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
palera1n/palera1nJailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.
theori-io/copy-fail-cve-2026-31431Exploits a 9-year-old Linux kernel local privilege escalation (CVE-2026-31431); provides tested exploit logic for Ubuntu, Amazon Linux, RHEL, and…
qilingframework/qilingA True Instrumentable Binary Emulation Framework
malwaredllc/byobAn open-source post-exploitation framework for students, researchers and developers.
rizinorg/rizinUNIX-like reverse engineering framework and command-line toolset.
gommzystudio/device-activity-trackerA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak…
0dayctf/reverse-shell-generatorHosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
ljagiello/ctf-skillsAgent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
hfiref0x/uacmeDefeating Windows User Account Control
gtworek/psbitsSimple (relatively) things allowing you to dig a bit deeper than usual.
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
swisskyrepo/ssrfmapAutomatic SSRF fuzzer and exploitation tool
trustedsec/unicornUnicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…
rub-nds/pretPrinter Exploitation Toolkit - The tool that made dumpster diving obsolete.
jonaslejon/malicious-pdfGenerate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…
zhzyker/exphubExphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938…
