Tools

raz0r/burp-radamsa

Radamsa fuzzer extension for Burp Suite

smirnovvad/rbuster

yet another dirbuster

internon/inter-recon

Script to perform automatic initial web and vulnerability recon

mreza-en/cve-2021-21994_poc

Validates and exploits VMware ESXi SFCB authentication bypass (CVE-2021-21994) via a probe/fuzz harness, enabling unauthenticated CIM-XML enumeration.

madexploits/ninja-form-exploit

CVE-2026-0740

jackieya/vitevulscan

针对CVE-2025-30208和CVE-2025-31125的漏洞利用

camshift/rtspbrute

Simple rtsp-stream bruteforce

liaoziqi-gzfls/cve-2026-42945

CVE-2026-42945 Nginx Rift

shipcod3/cve-2025-48466

Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control

zer1t0/barrido

Tool to discover paths in web applications

maherazzouzi/cve-2022-36163

Proof-of-concept exploit for CVE-2022-36163, a format string vulnerability in pdftoroff hovacui 1.1.0 PDF reader, demonstrating local…

functori/dev/gaia

Global API Integrity Assessor

omar2535/graphqler

☸The first ever dependency-aware GraphQL API testing tool!

usscltd/aalogger

CVE-2017-9627 CVE-2017-9629 CVE-2017-9631

ericmtzmtz/pwnproxy

An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.

openl2d/moc3ingbird

MOC3ingbird Exploit for Live2D (CVE-2023-27566)

andreafioraldi/frida-fuzzer

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

harsh-bothra/bheem

Scope-based reconnaissance automation framework that orchestrates multiple open-source tools for subdomain enumeration, vulnerability scanning, and…