#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
safebreach-labs/cve-2026-24061Exploitation of CVE-2026-24061
elttam/publicationsOffensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…
pyn3rd/cve-2019-0232Apache Tomcat Remote Code Execution on Windows
secmob/pwnfest2016full exploit of pwnfest2016, slide and full text of syscan2017
wh04m1001/cve-2023-21752Proof-of-concept exploit for CVE-2023-21752, an arbitrary file delete vulnerability in Windows Backup service, with two variants including privilege…
catsploit/catsploitAutomated penetration testing tool using Cyber Attack Techniques Scoring (CATS) to select and execute optimal attack scenarios via Metasploit, Nmap,…
boostsecurityio/smokedmeatA CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
rynosec/leakeyValidates leaked API tokens and keys using customizable JSON-based signature checks. Designed for pentesters and bug hunters to determine the impact…
wangyihang/sourceleakhacker:bug: A multi threads web application source leak scanner
nettitude/scroungerMobile application testing toolkit
irsdl/ysonetDeserialization payload generator for a variety of .NET formatters
preempt/credsspA code demonstrating CVE-2018-0886
euphrat1ca/cve-2020-0618SQL Server Reporting Services(CVE-2020-0618)中的RCE
behindthefirewalls/parseroParsero | Robots.txt audit tool
ps5dev/byepervisorA PS5 hypervisor exploit for 1.xx-2xx firmwares.
chocapikk/cve-2026-21858n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)
tykawaii98/cve-2024-30088Proof-of-concept exploit for CVE-2024-30088, a Windows kernel TOCTOU vulnerability in AuthzBasepCopyoutInternalSecurityAttributes enabling arbitrary…
h4x0r-dz/cve-2024-23897Python exploit for Jenkins CVE-2024-23897: arbitrary file read via CLI args4j parsing, enabling RCE. Scans hosts and extracts sensitive files from…
