#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
soltanali0/cve-2025-53770-exploitSharePoint WebPart Injection Exploit Tool
genai-security-project/genai-llm-top10OWASP Top 10 for Large Language Model Applications
zyylhn/zscanZscan a scan blasting tool set
cisagov/kev-dataMirrors CISA's Known Exploited Vulnerabilities (KEV) catalog as CSV and JSON with a JSON schema, enabling programmatic access and commit-history…
flipkart-incubator/rtaRed team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
owasp/json-sanitizerGiven JSON-like content, The JSON Sanitizer converts it to valid JSON.
dmontgomery40/pentest-mcpNOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR,…
elttam/semgrep-rulesStatic analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…
garatc/bitunlockerDowngrade attack for CVE-2025-48804
ethicalhackingplayground/ssrf-kingSSRF plugin for burp Automates SSRF Detection in all of the Request
andreisss/ksldumpKslDump — Why bring your own knife when Defender already left one in the kitchen?
evict/poc_cve-2018-1002105Proof-of-concept exploit for CVE-2018-1002105 targeting Kubernetes API server. Supports authenticated and unauthenticated privilege escalation to…
piotrflorczyk/cve-2019-1458_pocPOC for cve-2019-1458
ex0dus-0x/fuzzableStatic analysis framework that identifies fuzzable function targets in source code and binaries, generates harness templates, and integrates with…
zblurx/certsyncDump NTDS with golden certificates and UnPAC the hash
cyberark/blobhunterFind exposed data in Azure with this public blob scanner
