#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
ambionics/phpggcPHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
ghostpack/certifyC# tool for enumerating and exploiting misconfigurations in Active Directory Certificate Services (AD CS), enabling certificate template abuse,…
nullarray/autosploitAutomated Mass Exploiter
ignitetechnologies/privilege-escalationThis cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
oritera/cairnLLM-driven state-space search engine for autonomous penetration testing, CTF solving, and vulnerability research. Uses blackboard architecture with…
six2dez/pentest-bookCurated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…
mbechler/marshalsecJava deserialization vulnerability exploitation tool with payload generators for multiple marshallers (Jackson, XStream, SnakeYAML) and JNDI…
0x4d31/awesome-oscpA curated list of awesome OSCP resources
aflplusplus/libaflAdvanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
trustedsec/ptfThe Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
longld/pedaPEDA - Python Exploit Development Assistance for GDB
lascc/hacktoolsThe all-in-one browser extension for offensive security professionals 🛠
liamg/traitor:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w…
yukonga/ghostlock-appGhostLock One-Tap Execution App (CVE-2026-43499)
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
epsylon/ufonetUFONet - Denial of Service Toolkit
theporgs/exegolFully featured and community-driven hacking environment
t3l3machus/hoaxshellA Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
