Penetration Testing

quickbreach/exchangerelayx

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

adamyordan/cve-2019-1003000-jenkins-rce-poc

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline:…

spidermate/b-xssrf

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

shramos/polymorph

Polymorph is a real-time network packet manipulation framework with support for almost all existing protocols

peewpw/invoke-bsod

For when you want a computer to be done - without admin!

infobyte/spoilerwall

Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!

beetlechunks/redsails

RedSails is a Python based post-exploitation project aimed at bypassing host based security monitoring and logging. DerbyCon 2017 Talk:…

komomon/cve-2022-30190-follina-office-msdt-fixed

Modified CVE-2022-30190 exploit tool for MS-MSDT Office RCE with custom docx template support, binary/command execution modes, and embedded HTTP…

ridter/cve-2020-0688

cve-2020-0688

0ca/boxpwnr

A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, Cybench,…

crond-jaist/autopentest-drl

AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning

justicerage/ffm

Freedom Fighting Mode: open source hacking harness

cisco-sas/kitty

Fuzzing framework written in python

t0thkr1s/revshellgen

Reverse shell generator written in Python 3.

cyb0r9/androspy

Automated Android backdoor generator with crypter, IP poisoning, and Metasploit payload integration for penetration testing and red team operations.

cryptolok/aslray

Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying

enkomio/taipan

Web application vulnerability scanner