#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
rxwx/cve-2018-0802PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
danmcinerney/pentest-machineAutomates some pentest jobs via nmap xml file
secforce/snmp-bruteFast SNMP brute force, enumeration, CISCO config downloader and password cracking script.
nccgroup/shockerA tool to find and exploit servers vulnerable to Shellshock
zcgonvh/cve-2020-0688Exploit and detect tools for CVE-2020-0688
samhaxr/recoxMaster script for web reconnaissance
defenxor/dsiemSecurity event correlation engine for ELK stack
bo0om/php_imap_open_exploitBypassing disabled exec functions in PHP (c) CRLF
skylined/bugidDetect, analyze and uniquely identify crashes in Windows applications
acrono/cve-2024-6387-poc32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc
martian56/redcellAI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act…
trailofbits/testing-handbookTrail of Bits Testing Handbook - appsec.guide
owasp/secure-headers-projectOWASP knowledge base and validator for HTTP security response headers, providing recommendations, statistics, and automated configuration checks.
tintinweb/pubVulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb
kkent030315/evil-mhyprot-cliA PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.
michalbednarski/leakvalueExploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after…
jailbreakdotparty/dirtyzeroSimple customization toolbox, utilizing CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.
bazad/ida_kernelcacheAn IDA Toolkit for analyzing iOS kernelcaches.
