Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

174 results

-CVE-2024-45352

edwins907/-cve-2024-45352

Technical report about a critical vulnerability in Xiaomi (CVE-2024-45352)

exploitationhardware-iot-securityiot-security+3

11 year ago

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

mbanyamer/cve-2026-26235-jung-smart-visu-server-unauthenticated-reboot-shutdown

Proof-of-concept exploit for CVE-2026-26235, an unauthenticated denial-of-service vulnerability in JUNG Smart Visu Server <=1.1.1050, allowing remote…

exploitationiot-securitypenetration-testing+2

7 months ago

scan-cve-2026-24061

killsystema/scan-cve-2026-24061

Scans for CVE-2026-24061 telnetd auth bypass, generating payloads and verifying root access on vulnerable GNU inetutils telnetd devices.

exploitationiot-securitynetwork-security+3

8 months ago

CVE-2021-36260-hikvision

shubtheone/cve-2021-36260-hikvision

Python exploit for CVE-2021-36260 command injection in Hikvision web servers. Supports safe/unsafe vulnerability verification, remote command…

command-and-controlexploitationiot-security+3

8 months ago

exploit-CVE-2026-2670

ali-py3/exploit-cve-2026-2670

Proof-of-concept exploit for CVE-2026-2670, a command injection vulnerability in Advantech WISE-6610 routers, allowing authenticated attackers to…

command-and-controlexploitationiot-security+3

7 months ago

CVE-2025-65427

kirubel-cve/cve-2025-65427

Proof-of-concept exploit for CVE-2025-65427: missing rate limiting on Dbit N300 T1 Pro router login API enabling brute-force attacks and…

authenticationiot-securitypassword-attacks+3

9 months ago

SpaceX-Starlink-Router-Gen-2-XSS

yoshida-git-ai/spacex-starlink-router-gen-2-xss

CVE-2023-49965 | SpaceX / Starlink Router Gen 2 XSS

exploitationhardware-iot-securityiot-security+3

12 years ago

CVE-2025-67158

remenis/cve-2025-67158

Revotech I6032W-FHW IP camera firmware fails to validate authentication fields in API requests, allowing attackers to bypass authentication and…

authenticationexploitationiot-security+3

9 months ago

CVE-2025-9983

sohaibeb/cve-2025-9983

CVE-2025-9983 POC Exploit

exploitationiot-securitypenetration-testing+2

11 months ago

CVE-2019-18370_XiaoMi_Mi_WIFI_RCE_analysis

fzbacon/cve-2019-18370_xiaomi_mi_wifi_rce_analysis

exploitationhardware-iot-securityiot-security+4

13 years ago

HuaWei_Route_HG532_RCE_CVE-2017-17215

ltfafei/huawei_route_hg532_rce_cve-2017-17215

Proof-of-concept exploit for CVE-2017-17215, demonstrating remote command injection in Huawei HG532 routers using POCsuite and Go implementations.

command-and-controlexploitationiot-security+3

3 years ago

CVE-2024-57366

h4ckusaur/cve-2024-57366

Remote code execution exploit for CVE-2024-57366 targeting WAVLINK routers via MAC address validation bypass and command injection, with automatic…

command-and-controlexploitationiot-security+6

1 year ago

CVE-2025-48461

joelczk/cve-2025-48461

Technical disclosure of a predictable session cookie vulnerability (CVE-2025-48461) in Advantech WISE-4060 IoT portal, enabling bruteforce…

authenticationexploitationiot-security+3

1 year ago

Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC

darknesschieftain/injection-vulnerability-in-paradox-security-systems-ipr512-cve-2023-24709-poc

In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as "</script>" that will overwrite…

exploitationiot-securitypenetration-testing+3

3 years ago

CVE-2023-40459

7h3w4lk3r/cve-2023-40459

CVE-2023-40459 Unauthenticated DoS PoC Exploit

exploitationiot-securitypenetration-testing+2

4 months ago

D-Link

aymankhalfatni/d-link

CVE-2017-12943

exploitationhardware-iot-securityiot-security+3

9 years ago

CVE-2019-13361

lodi-g/cve-2019-13361

Smanos W100 1.0.0 devices have Insecure Permissions, exploitable by an attacker on the same Wi-Fi network.

exploitationiot-securitypenetration-testing+2

7 years ago

CVE-2024-5947

cappricio-securities/cve-2024-5947

Deep Sea Electronics DSE855 - Authentication Bypass

authenticationexploitationiot-security+3

2 years ago