Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

199 results

CVE-2024-36401

bigb0x/cve-2024-36401

POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.

exploitationpayload-generationpenetration-testing+3

342 years ago

CVE-2021-2109

al1ex/cve-2021-2109

CVE-2021-2109 && Weblogic Server RCE via JNDI

educationexploitationpayload-generation+3

315 years ago

harpyTools

jssngc/harpytools

Automated Active Directory post-exploitation toolkit for Kerberos ticket extraction, NTLM relay attacks, and lateral movement via NetExec, Impacket,…

command-and-controlexploitationlateral-movement+6

192 months ago

react2shell-poc

p3ta00/react2shell-poc

CVE-2025-55182 React2Shell PoC - Critical RCE in React Server Components / Next.js. CVSS 10.0. Error-based exfil, reverse shell, interactive mode.

command-and-controleducationexploitation+5

95 months ago

ecp_slap

zyn3rgy/ecp_slap

CVE-2020-0688 PoC

exploitationpayload-generationpenetration-testing+3

111 year ago

XSS2Shell

wordsec/xss2shell

Wordpress Pre-auth XSS to RCE exploit PoC (xss2shell & CVE-2026-64638)

educationexploitationpayload-generation+4

62 months ago

CVE-2025-3243

tenebrae93/cve-2025-3243

A proof-of-concept exploit for CVE-2025-32433, a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via…

exploitationpayload-generationpenetration-testing+3

71 year ago

CVE-2025-66516-POC

sid6224/cve-2025-66516-poc

A POC for the CVE-2025-66516 Apache Tika Vulnerability for educational purposes only

educationexploitationpayload-generation+3

610 months ago

MassExploit-CVE-2024-4577

cirqueiradev/massexploit-cve-2024-4577

CVE-2024-4577 Mass Scanner & Exploit Tool

exploitationpayload-generationpenetration-testing+3

511 months ago

cve-2022-44268

agathanon/cve-2022-44268

Payload generator and extractor for CVE-2022-44268 written in Python.

data-exfiltrationexploitationinformation-gathering+2

43 years ago

CVE-2026-48908

jenderal92/cve-2026-48908

CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell…

exploitationpayload-generationpenetration-testing+4

23 months ago

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

moi404/cve-2026-22686-remotecodeexecution-rce-poc

Proof-of-concept exploit and payload generator for CVE-2026-22686, a sandbox escape in enclave-vm <2.7.0 enabling arbitrary code execution and…

educationexploitationpapers-research+5

1 month ago

laravel-filemanager-unrestricted-upload

jenderal92/laravel-filemanager-unrestricted-upload

PoC for CVE-2025-56399 - Unrestricted File Upload leading to RCE in alexusmai/laravel-file-manager (≤3.3.1). Automates detection, CSRF extraction,…

educationexploitationpayload-generation+3

14 months ago

CVE-2020-15916

geniuszly/cve-2020-15916

Proof-of-concept exploit for CVE-2020-15916, enabling unauthorized LAN configuration changes via weak authentication bypass and payload injection.

educationexploitationnetwork-security+2

32 years ago

CVE-2021-1675

puckiestyle/cve-2021-1675

Impacket-based exploit for CVE-2021-1675 (PrintNightmare) enabling remote or local DLL execution on Windows Domain Controllers with SMB payload…

exploitationlateral-movementpayload-generation+3

15 years ago

CVE-2026-9277

dylanzahedi/cve-2026-9277

Proof-of-concept exploit for CVE-2026-9277, a command injection vulnerability in shell-quote library. Performs recursive JSON traversal with…

command-and-controlexploitationpayload-generation+3

23 months ago

SLAE

kkirsche/slae

SecurityTube Linux Assembly Expert x86 Exam

binary-exploitationcryptographyeducation+5

18 years ago

CVE-2017-14980_syncbreeze_10.0.28_bof

lipeozyy/cve-2017-14980_syncbreeze_10.0.28_bof

Proof-of-concept buffer overflow exploit for Sync Breeze Enterprise v10.0.28 (CVE-2017-14980). Sends crafted HTTP POST payload to overwrite EIP and…

binary-exploitationexploitationpayload-generation+4

21 year ago