#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
grutz/h3c-pt-toolsHuawei/H3C/HP Penetration Testing Tools
kpwnz/def1nit3lyn0taja1lbr3aktoolA jailbreak tool for all arm64 devices on iOS 16.0 to iOS 16.6.1
capture0x/lfi-finderAutomated scanner for detecting Local File Inclusion (LFI) vulnerabilities in web applications by analyzing URLs and testing payloads via geckodriver.
seanheelan/o3_finds_cve-2025-37899Artefacts for blog post on finding CVE-2025-37899 with o3
cmnatic/cve-2024-21413CVE-2024-21413 PoC for THM Lab
madhavmehndiratta/dorkscannerA typical search engine dork scanner scrapes search engines with dorks that you provide in order to find vulnerable URLs.
mynameismeerkat/pyreticpyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering
milo2012/cve-2018-13382CVE-2018-13382
owasp/secure-agent-playbookOWASP Secure Agent Playbook Project
badsectorlabs/copyfail-goA Go implementation of copyfail (CVE-2026-31431)
danialhalo/sqlisniperAdvanced Time-based Blind SQL Injection fuzzer for HTTP Headers
idnahacks/goodhoundUses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
mpgn/cve-2019-7238🐱💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱💻
bazad/blanketCVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.
gonzosint/whatcmsShell-based CMS detection and exploit kit identifying 330+ content management systems, then launching automated security audits and exploitation…
mandatoryprogrammer/tarnishA Chrome extension static analysis tool to help aide in security reviews.
commonexploits/port-scan-automationAutomate NMAP Scans and Generate Custom Nessus Policies Automatically
ernw/androticklerPenetration testing and auditing toolkit for Android apps.
