Integrated platforms for developing, executing, and managing penetration tests.
icmpoff/apache-2.4.49-2.4.50-traversal-remote-code-execution-exploitThis Metasploit module exploits an unauthenticated remote code execution vulnerability which exists in Apache version 2.4.49 (CVE-2021-41773). If…
praetorian-inc/wasmforgeWasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.
licitrasimone/crystalsliverCrystal Palace Evasion kit for Sliver
28zaaky/khaos-c2KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.
invuls/pentest-projects/pcfOpensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing!
jakobfriedl/conquestConquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.
codextf2/customc2channeltemplatetemplate for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.
blueisbeautiful/cve-2018-19323An exploitation framework for CVE-2018-19323 - GIGABYTE GDrv privilege escalation vulnerability with multi-architecture support and framework…
pard0p/remote-bof-runnerRemote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal Palace.
safelineman/agentic-soc-simulationAI 驱动的 SOC 仿真平台
shipsecai/studioWorkflow automation for Security Teams
flags-alt/abyss-c2ABYSS C2 — HiSilicon DVR Exploit Framework (CVE-2020-25078). Educational IoT security research platform.
gadievron/raptorAutonomous security research framework integrating static analysis, binary analysis, fuzzing, LLM-powered vulnerability validation, exploit…
erarnitox/malvexc2A simple C2 Framework written in modern C++
adityasingh108/cve-2026-31431-metasploit-exploitAutomated Metasploit post-exploitation module for CVE-2026-31431 ("Copy Fail"). Weaponizes a deterministic logic flaw in the Linux kernel AF_ALG…
sydsec1/sydAir-gapped cybersecurity assistant for security professionals. 100% offline AI-powered analysis tool for Nmap, Volatility, BloodHound, Metasploit,…
seanheelan/anamnesis-releaseEvaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…
cobalt-strike/edenA PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (Draugr)
