#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

Exploit and detect tools for CVE-2020-0688

Proof-of-concept exploit for Microsoft Exchange Server Remote Code Execution via ACL bypass, privilege escalation, and arbitrary file write…

A bin2bin code virtualizer for x86-64 PE's


A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and…

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence

Web-based project management interface for penetration testing and bug bounty workflows, automating port scanning with Nmap/Masscan and subdomain…

confluence CVE-2023-22527 漏洞利用工具,支持冰蝎/哥斯拉内存马注入,支持设置 http 代理

A simple tool to dump users in popular forums and CMS :)

Exploit for CVE-2017-0199 targeting Microsoft Office/WordPad remote code execution via crafted RTF documents with OLE object handling.

CVE-2026-34197 activemq PoC

CVE-2022-21882

Exploit for CVE-2022-21661 targeting Elementor WordPress plugin, enabling SQL injection-based privilege escalation and data extraction.

A fully red-team(offensive security) weaponized variant of wp2shell, built for authorized penetration testing & educational purposes.

SQLPad - Template injection (POC exploit for SQLPad RCE [CVE-2022-0944])

Exploit for CVE-2019-14974, providing a proof-of-concept bypass for a specific vulnerability. Intended for security testing and vulnerability…