#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
li4n0/revsuitRevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.
yalcinyolalan/wssatWEB SERVICE SECURITY ASSESSMENT TOOL
padovah4ck/cve-2020-0683CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege
qtc-de/beanshooterJMX enumeration and attacking tool.
shack2/javaserializetoolsJava反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞…
cyb0r9/ispyispy V1.0 - Eternalblue(ms17-010)/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )
volkandindar/agarthaA Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations. It…
pwnfunction/cve-2021-4034Proof of concept for pwnkit vulnerability
alpha1ab/cve-2018-8120CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7
mzfr/slicerA tool to automate the boring process of APK recon
getagentseal/agentsealSecurity toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…
medpaf/hawkNetwork, recon and offensive-security tool for Linux.
ramadhanamizudin/lazywebLazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized…
initstring/evil-ssdpSpoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.
airbus-cert/ttddbgTime Travel Debugging IDA plugin
trailofbits/test-fuzzRust macros and Cargo subcommand to automate fuzzing with afl.rs, including corpus generation and harness implementation, integrated with Rust's…
cyberark/evasorA tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
