Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

84 results

Archived

Debinject

undeadsec/debinject

Inject malicious code into *.debs

educationexploitationmalware-analysis+3

2934 years ago

HtmlSmuggling

de3vil/htmlsmuggling

it is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page

malware-analysispayload-generationphishing-tools+1

1193 years ago

bluffy

preemptdev/bluffy

Convert shellcode into :sparkles: different :sparkles: formats!

ids-ips-evasionpayload-generationshellcode+1

3563 years ago

fileless-xec

ariary/fileless-xec

Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)

command-and-controlexploitationids-ips-evasion+7

2102 years ago

log4j-CVE-2021-44228-test

kossatzd/log4j-cve-2021-44228-test

demo project to highlight how to execute the log4j (CVE-2021-44228) vulnerability

educationexploitationpayload-generation+3

4 years ago

CVE-2020-0688-Python3

1337-llama/cve-2020-0688-python3

Exploit updated to use Python 3.

exploitationpayload-generationpenetration-testing+2

22 years ago

samba-trans2open-exploit-report

bakr-ht/samba-trans2open-exploit-report

Exploitation report of the Samba Trans2Open vulnerability (CVE-2003-0201), including tools used, exploitation steps, and protection techniques to…

educationexploitationnetwork-mapping+6

211 months ago

SerialKillerBypassGadgetCollection

pwntester/serialkillerbypassgadgetcollection

Collection of bypass gadgets to extend and wrap ysoserial payloads

exploitationpayload-developmentpayload-generation+1

3894 years ago

OverThruster

redlectroid/overthruster

HID attack payload generator for Arduinos

hardware-iot-securitypayload-generationpenetration-testing+1

1652 years ago

PoC-CVE-2019-1003030

cyberbelly/poc-cve-2019-1003030

PoC for jenkins 2.63 CVE-2019-1003030

command-and-controlexploitationpayload-generation+3

1 month ago

sliver

bishopfox/sliver

Adversary Emulation Framework

adversarial-attackcommand-and-controlexploit-frameworks+4

11.7k1 day ago

Archived

Freeze

optiv/freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

exploit-frameworksids-ips-evasionpayload-development+8

1.5k3 years ago

CVE-2019-11447

mt-code/cve-2019-11447

Exploits CuteNews 2.1.2 via poor file upload checks used when uploading an avatar image leading to RCE.

exploitationpayload-generationpenetration-testing+2

5 years ago

CVE-2017-0213

jbooz1/cve-2017-0213

A version of CVE-2017-0213 that I plan to use with an Empire stager

command-and-controlexploitationpayload-generation+3

18 years ago

CVE-2024-7954-RCE

gh-ost00/cve-2024-7954-rce

Unauthenticated Remote Code Execution in SPIP versions up to and including 4.2.12

exploitationpayload-generationpenetration-testing+3

91 year ago

CVE-2024-56145-craftcms-rce

sachinart/cve-2024-56145-craftcms-rce

CVE-2024-56145 SSTI to RCE - twig templates

exploitationpayload-generationpenetration-testing+2

41 year ago

CVE-2023-0099-exploit

amirzargham/cve-2023-0099-exploit

simple urls < 115 - Reflected XSS

exploitationpayload-generationpenetration-testing+3

62 years ago

CVE-2022-39952_webshell

shiyeshu/cve-2022-39952_webshell

Write Behinder_webshell to target using CVE-2022-39952

exploitationpayload-generationpenetration-testing+2

23 years ago