#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
twosevenonet/injectsetconsoleProof of Concept for Process Code Injection Without Using WriteProcessMemory
seifelsallamy/blind-xss-managerNever forget where you inject.
redcode-labs/snowcrashGenerates cross-platform polyglot payloads (Bash/PowerShell) for command execution, reverse shells, and binary execution, with configurable delay and…
zeromemoryex/cve-2025-26125( 0day ) Local Privilege Escalation in IObit Malware Fighter
ruped24/killchainA unified console to perform the "kill chain" stages of attacks.
yifanlu/taihenCFW framework for PS Vita
lcashdol/exploitsExploits for various CVEs
bcdannyboy/cve-2023-44487Non-invasive HTTP/2 vulnerability scanner for CVE-2023-44487 that detects exploitable stream reset conditions by testing protocol downgrade and…
0x36/weightbufsANE kernel r/w exploit for iOS 15 and macOS 12
shipsecai/studioWorkflow automation for Security Teams
mystenlabs/ed25519-unsafe-libsList of unsafe ed25519 signature libs
rwxstoned/ldrshuffleCode execution/injection technique using DLL PEB module structure manipulation
nettitude/malsccmAbuse SCCM servers to deploy malicious applications to managed hosts for lateral movement and red team operations.
noahoksuz/osripperAV evading cross platform Backdoor and Crypter Framework with a integrated lightweight webUI
virtualalllocex/payload-download-cradlesThis are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context…
0x09al/dns-persistDNS-Persist is a post-exploitation agent which uses DNS for command and control.
