Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

451 results

xencrypt

the-xentropy/xencrypt

A PowerShell script anti-virus evasion tool

exploitationids-ips-evasionpayload-generation+2

1.2k6 years ago

MassExploit-CVE-2024-4577

cirqueiradev/massexploit-cve-2024-4577

CVE-2024-4577 Mass Scanner & Exploit Tool

exploitationpayload-generationpenetration-testing+3

58 months ago

cve-2025-2945-poc

cycloctane/cve-2025-2945-poc

Python PoC script for pgAdmin4 Query Tool RCE (CVE-2025-2945)

educationexploitationpayload-generation+3

79 months ago

CVE-2016-4438

jason3e7/cve-2016-4438

Proof-of-concept exploit for Apache Struts2 S2-037 (CVE-2016-4438) remote code execution vulnerability. Includes PoC script and command execution…

exploitationpayload-generationpenetration-testing+2

110 years ago

zkar

phith0n/zkar

Go-based Java serialization protocol analyzer that parses, dumps, and generates deserialization payloads with ysoserial gadget support and a library…

binary-analysisexploitationpayload-generation+1

6534 months ago

winrar-cve-2023-38831-poc-gen

s4m98/winrar-cve-2023-38831-poc-gen

WinRAR cve-2023-38831-poc-generator

educationexploitationpayload-generation+2

12 years ago

CVE-2024-44871

vances25/cve-2024-44871

Python exploit for MoziloCMS <= 3.0.1 that uploads a PHP web shell via authenticated admin access, renames the file, and executes system commands on…

educationexploitationpayload-generation+2

1 year ago

java-remote-class-loader

joaovarelas/java-remote-class-loader

Client-server tool for remotely loading and executing Java bytecode via ClassLoader and Reflect API, with ChaCha20 encryption and keepalive…

command-and-controlencryption-decryption-toolsexploitation+3

344 years ago

jexboss

joaomatosf/jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

exploitationpayload-generationpenetration-testing+2

2.5k9 years ago

AlanFramework

enkomio/alanframework

A C2 post-exploitation framework

command-and-controlencryption-decryption-toolslateral-movement+7

4862 years ago

react2shell-CVE-2025-55182-full-rce-script

chrahman/react2shell-cve-2025-55182-full-rce-script

React2Shell vulnerability (CVE-2025-55182 / CVE-2025-66478) Full Script

command-and-controleducationexploitation+5

38 months ago

CVE-2022-4616-POC

ahanel13/cve-2022-4616-poc

This Python script aids in exploiting CVE-2022-46169 by automating payload delivery and response handling. It starts an HTTP server, listens for…

educationexploitationpayload-generation+2

3 years ago

Log4j-Exploit-CVE-2021-44228

willian-2-0-0-1/log4j-exploit-cve-2021-44228

Exploit tool for CVE-2021-44228 (Log4Shell) that sets up a malicious LDAP server and delivers a Java payload to achieve remote code execution on…

command-and-controlexploitationpayload-generation+3

4 years ago

CVE-2024-10914-Exploit

tamirido30/cve-2024-10914-exploit

CVE-2024-10914 Shell Exploit

command-and-controlexploitationpayload-generation+5

1 year ago

CVE-2022-30190-follina

drgreenthumb93/cve-2022-30190-follina

Proof-of-concept exploit for CVE-2022-30190 (Follina MSDT vulnerability). Generates a malicious Word document that executes a remote script via the…

educationexploitationpayload-generation+2

83 years ago

CVE-2023-41425-RCE-WonderCMS-4.3.2

tea-on/cve-2023-41425-rce-wondercms-4.3.2

Automates creation and hosting of a JavaScript XSS payload to install a malicious theme module, triggering a reverse shell via Remote Code Execution…

educationexploitationpayload-generation+5

81 year ago

ACEDcup

grrrdog/acedcup

Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)

exploitationpayload-generationpenetration-testing+2

3710 years ago

ysoserial

frohoff/ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

educationexploit-frameworkspayload-generation+3

9.0k8 months ago