Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

515 results

xxexploiter

luisfontes19/xxexploiter

Tool to help exploit XXE vulnerabilities

exploitationfuzzingpayload-generation+2

6174 years ago

backdoor-apk

dana-at-cp/backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have…

android-securityeducationexploit-frameworks+2

2.4k8 years ago

Invoke-PSImage

peewpw/invoke-psimage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

command-and-controlpayload-generationred-teaming+1

2.2k7 years ago

Ropper

sashs/ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64,…

binary-analysisbinary-exploitationctf+3

2.2k1 month ago

FakeImageExploiter

r00t-3xp10it/fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

command-and-controlexploitationpayload-development+5

9481 year ago

PackMyPayload

mgeeky/packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…

container-securityexploit-frameworkspayload-development+3

1.2k3 years ago

goshs

goshs-labs/goshs

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP…

command-and-controlctfdns-analysis+5

9865 days ago

CVE-2017-0199

bhdresh/cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test…

educationexploitationmalware-analysis+3

7258 years ago

CVE-2022-29464

hakivvi/cve-2022-29464

Python exploit for CVE-2022-29464, an unauthenticated arbitrary file upload vulnerability in WSO2 servers, enabling remote code execution via…

exploitationpayload-generationpenetration-testing+3

3774 years ago

EmbedInHTML

arno0x/embedinhtml

Embed and hide any file in an HTML file

payload-generationphishing-toolssocial-engineering+1

4899 years ago

BobTheSmuggler

thecyb3ralpha/bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would…

educationencryption-decryption-toolspayload-development+4

5971 year ago

Upload_Bypass

sajibuu/upload_bypass

A simple tool for bypassing file upload restrictions.

exploitationpayload-generationpenetration-testing+2

9072 years ago

PyShell

joelgmsec/pyshell

Multi-platform Python webshell providing remote shell access on web servers with command history, file upload/download, and directory traversal…

payload-generationpenetration-testingremote-access-tool+1

3191 month ago

ImgBackdoor

tsuyoken/imgbackdoor

Hide your payload into .jpg file

command-and-controlexploitationpayload-development+3

3944 years ago

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

duc-nt/cve-2022-44268-imagemagick-arbitrary-file-read-poc

PoC payload generator for CVE-2022-44268 ImageMagick arbitrary file read vulnerability. Demonstrates exploitation via crafted PNG files for…

educationexploitationpayload-generation+3

2753 years ago

Windows-PE-Packer

czs108/windows-pe-packer

🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse…

binary-analysisexploitationpayload-generation+1

3671 year ago

HTTP-Shell

joelgmsec/http-shell

Multiplatform HTTP reverse shell providing a shell-like interface over HTTP, with file upload/download, command history, auto-reconnection, and sudo…

command-and-controlpayload-generationpenetration-testing+2

2441 month ago

RAU_crypto

bao7uo/rau_crypto

Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

encryption-decryption-toolsexploitationpayload-generation+3

1806 years ago