Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

31 results

CVE-2026-52200

lamaper/cve-2026-52200

Security advisory detailing broken access control in UZ801/ES-U3TS MifiService web API, allowing unauthenticated data extraction, config…

configuration-auditingexploitationinformation-gathering+4

3 months ago

CVE-2026-42281

astaruf/cve-2026-42281

Proof-of-concept exploit for CVE-2026-42281, an unauthenticated SSRF in MagicMirror² ≤ 2.35.0, enabling config exfiltration, cloud metadata probing,…

exploitationinformation-gatheringpenetration-testing+3

4 months ago

mmiotic

xoreaxeaxeax/mmiotic

Latency x-ray for undocumented hardware

hardware-hackinghardware-securityinformation-gathering+2

13922 days ago

BFScan

blackfan/bfscan

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…

android-securityapi-securityinformation-gathering+5

2568 months ago

cisco-SNMP-enumeration

nccgroup/cisco-snmp-enumeration

Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking

configuration-auditinginformation-gatheringnetwork-security+3

22610 years ago

behat-config-leaks

cappricio-securities/behat-config-leaks

BeHat Configuration file leaking

information-gatheringmisconfigurationsecret-detection+3

12 years ago

monitorr-exploit-toolkit

sec-it/monitorr-exploit-toolkit

Multiple exploits for Monitorr

authentication-authorizationexploitationinformation-gathering+3

105 years ago

Praeda

percx/praeda

Automated data harvesting tool for extracting sensitive information (backups, clones, address books) from web servers via targeted scanning and…

crawlerinformation-gatheringnetwork-mapping+3

1942 years ago

Invoke-DumpMDEConfig

blacksnufkin/invoke-dumpmdeconfig

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

configuration-auditingdefensive-toolsforensics+3

1552 years ago

CVE-2021-33558.

mdanzaruddin/cve-2021-33558.

Exploit code for CVE-2021-33558 targeting Boa/0.94.13 misconfigurations that expose sensitive information via backup, preview, log, and config files.

exploitationinformation-gatheringmisconfiguration+2

35 years ago

CVE-2024-32238

fubolusec/cve-2024-32238

H3C ER8300G2-X config download

exploitationinformation-gatheringpenetration-testing+2

12 years ago

cve-2019-6340-bits

josehelps/cve-2019-6340-bits

Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE

exploitationinformation-gatheringlog-analysis+3

7 years ago

CVE-2023-23752

gibran-abdillah/cve-2023-23752

Bulk vulnerability scanner for CVE-2023-23752 that extracts configuration data from vulnerable Joomla instances.

exploitationinformation-gatheringpenetration-testing+2

73 years ago

CVE-2022-40684

ccordeiro/cve-2022-40684

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

authenticationexploitationinformation-gathering+3

9 months ago

sift-kg

juanceresa/sift-kg

Turn any collection of documents into a knowledge graph. Extract entities and relationships via LLM, deduplicate with your approval. Map domains,…

data-recoverydigital-forensicseducation+4

7943 months ago

CVE-2023-23752

0xwhoami35/cve-2023-23752

Authentication bypass exploit for Joomla CVE-2023-23752 that leaks administrator credentials and MySQL configuration from vulnerable versions…

authenticationexploitationinformation-gathering+3

21 year ago

CVE-2021-42183

0xraw/cve-2021-42183

Proof-of-concept exploit for path traversal in MasaCMS 7.2.1 via /index.cfm/_api/asset/image/, allowing unauthenticated attackers to read arbitrary…

exploitationinformation-gatheringpenetration-testing+2

2 years ago

CVE-2023-33246

0xkayala/cve-2023-33246

Exploits Apache RocketMQ brokers vulnerable to CVE-2023-33246 remote code execution and checks targets via IP, CIDR, or file input.

exploitationinformation-gatheringpenetration-testing+3

22 years ago