Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

415 results

cve-2025-57819-exploit

its1zero/cve-2025-57819-exploit

Python exploit for CVE-2025-57819 targeting FreePBX via unauthenticated SQL injection to achieve remote code execution with automatic reverse shell…

exploitationpayload-developmentpenetration-testing+4

2 months ago

CVE-2025-32463_exploit

0xdak/cve-2025-32463_exploit

Local privilege escalation exploit for sudo 1.9.14-1.9.17 that abuses CVE-2025-32463 chroot handling, planting a malicious NSS library constructor to…

exploitationpayload-developmentprivilege-escalation+1

1 month ago

MASS-CVE-2024-27956

itzheartzz/mass-cve-2024-27956

Proof-of-concept exploit for CVE-2024-27956 SQL injection in ValvePress Automatic plugin. Creates admin users in WordPress to achieve remote code…

exploitationpayload-developmentpenetration-testing+3

32 years ago

Docker-Escape-Miner

epsteina16/docker-escape-miner

Code sample for using exploit CVE-2019-5736 to mine bitcoin with no association to original container or user.

container-escapeexploitationpayload-development+3

36 years ago

chimera

1neptune/chimera

Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence

binary-exploitationexploitationpayload-development+4

2 months ago

Dirty-Pipe

rabomen/dirty-pipe

exp of CVE-2022-0847

binary-exploitationexploitationpayload-development+3

24 years ago

CVE-2021-1675-PrintNightmare

killtr0/cve-2021-1675-printnightmare

PowerShell exploit for CVE-2021-1675 (PrintNightmare) performing local privilege escalation via Print Spooler, with custom DLL payload injection and…

exploitationpayload-developmentpenetration-testing+2

25 years ago

CVE-2024-10793

mahajian/cve-2024-10793

Proof-of-concept exploit for CVE-2024-10793 targeting WordPress wp-security-audit-log plugin. Demonstrates account takeover, privileged user…

exploitationpayload-developmentprivilege-escalation+3

21 year ago

CVE-2018-1932X

bkreisel/cve-2018-1932x

Rust POC for CVE-2018-1932X kernel driver vulnerabilities

binary-exploitationexploitationpayload-development+3

34 years ago

CVE-2020-1048

ken-abruzzi/cve-2020-1048

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka…

exploitationpayload-developmentpost-exploitation+2

25 years ago

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

sam00/cve-2026-56158-.net-framework-rce-poc-exploit

Generates five .NET deserialization payload formats for CVE-2026-56158, delivers them over HTTP/SOAP/JSON endpoints, includes mock server, scanner,…

exploitationpayload-developmentpayload-generation+4

11 month ago

COPY-FAIL

toxy4ny/copy-fail

Copy Fail - CVE-2026-31431 - Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is…

binary-exploitationcommand-and-controlexploitation+4

12 months ago

CVE-2026-63030

administrator-01001/cve-2026-63030

Proof-of-concept exploit for CVE-2026-63030, a pre-authentication vulnerability in WordPress (versions 6.9.0 through 7.0.1).

exploitationpayload-developmentpenetration-testing+4

12 months ago

WinRAR-CVE-2025-8088-Path-Traversal-PoC

pexlexity/winrar-cve-2025-8088-path-traversal-poc

Proof-of-Concept for CVE-2025-8088 vulnerability in WinRAR (path traversal via ADS)

binary-exploitationexploitationmalware-analysis+3

21 year ago

CVE-2025-66849

wojtekchwala/cve-2025-66849

Ghost CMS Privilege Escalation PoC

exploitationpayload-developmentpenetration-testing+3

5 months ago

CVE-2026-41940

mroplus/cve-2026-41940

Exploit for CVE-2026-41940 providing direct shell access via websocket and persistence through root API key injection.

exploitationpayload-developmentpost-exploitation+2

14 months ago

CVE-2021-1732

flyinbedxyz/cve-2021-1732

Local privilege escalation exploit for CVE-2021-1732 targeting Windows 10 and Server versions, with PoC code and affected system enumeration.

binary-exploitationexploitationpayload-development+2

5 years ago

CVE-2025-62429

drkim-dev/cve-2025-62429

Proof-of-concept for authenticated remote code execution in ClipBucket via PHP code injection in update_launch.php. Includes web shell deployment and…

code-analysisexploitationpayload-development+5

15 months ago