Tools

cleanunicorn/theo

Ethereum recon and exploitation tool.

freelabz/secator

secator - the pentester's swiss knife

rapid7/metasploit-framework

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

vulnerscom/getsploit

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

1n3/sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

nullarray/autosploit

Automated Mass Exploiter

1n3/findsploit

Find exploits in local and online databases instantly

rfunix/pompem

Find exploit tool

nationalsecurityagency/ghidra

Ghidra is a software reverse engineering (SRE) framework

threat9/routersploit

Exploitation Framework for Embedded Devices

its-a-feature/mythic

A collaborative, multi-platform, red teaming framework

phra/pezor

Pack shellcode and PE executables into evasive payloads with anti-debug, unhooking, syscall, and memory fluctuation techniques for red-team…

berylliumsec/nebula

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

rastating/wordpress-exploit-framework

A Ruby framework designed to aid in the penetration testing of WordPress systems.

0xthirteen/movekit

Cobalt Strike kit for Lateral Movement

egebalci/hercules

HERCULES is a special payload generator that can bypass antivirus softwares.

chudry/xerror

fully automated pentesting tool

tijme/kernel-mii

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.