Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

98 results

prefetch-tool

exploits-forsale/prefetch-tool

Windows KASLR bypass using prefetch side-channel

binary-exploitationexploitationinformation-gathering+4

2122 years ago

adexplorersnapshot-rs

t94j0/adexplorersnapshot-rs

identity-access-managementinformation-gatheringpenetration-testing+1

973 months ago

CVE-2018-15473-User-Enumeration-

bdalrhmnhamdalalm-jpg/cve-2018-15473-user-enumeration-

python code use to check for user in ssh

exploitationinformation-gatheringnetwork-security+3

16 days ago

urgent11-detector

armissecurity/urgent11-detector

URGENT/11 detection tool by Armis

embedded-systems-securityinformation-gatheringiot-security+5

646 years ago

linux-exploit-suggester

h3x0v3rl0rd/linux-exploit-suggester

exploitationpenetration-testingprivilege-escalation+2

4 years ago

CVE-2024-23897

wjlin0/cve-2024-23897

CVE-2024-23897 - Jenkins 任意文件读取利用工具

exploitationinformation-gatheringpenetration-testing+3

862 years ago

meshdeck

adminempire/meshdeck

MeshDeck port for Arch Linux ARM - Wilson

command-and-controlexploitationlateral-movement+5

12 years ago

metasploit-framework-nu11secur1ty

nu11secur1ty/metasploit-framework-nu11secur1ty

Extending of metasploit-framework

command-and-controlexploitationexploit-frameworks+9

110 months ago

Xenotix-xBOT

ajinabraham/xenotix-xbot

Xenotix xBOT is a Cross Platform PoC Bot that abuse certain Google Services to implement it's C&C

command-and-controlexploitationinformation-gathering+4

288 years ago

C2-Pwn

lukebob-zz/c2-pwn

Uses Shodan API to pull down C2 servers to run known exploits on them.

command-and-controlexploitationosint+3

188 years ago

Linux_Exploit_Suggester

intelisecurelabs/linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

exploitationinformation-gatheringpenetration-testing+3

1.8k12 years ago

Vite-CVE-2025-30208-EXP

lilil3333/vite-cve-2025-30208-exp

Vite-CVE-2025-30208-EXP单目标检测，支持自定义读取路径，深度检索

exploitationinformation-gatheringpenetration-testing+3

11 year ago

CVE-2024-6387

l0n3m4n/cve-2024-6387

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

exploitationnetwork-securitypayload-development+6

1102 years ago

BlueKeep

oneoy/bluekeep

CVE-2019-0708 bluekeep 漏洞检测

exploitationinformation-gatheringnetwork-security+3

7 years ago

rover

violentshell/rover

Proof of Concept code for CVE-2016-5696

exploitationinformation-gatheringnetwork-security+3

1029 years ago

regreSSHion-checker

xonoxitron/regresshion-checker

Quickly identifies servers vulnerable to OpenSSH 'regreSSHion' (CVE-2024-6387).

exploitationinformation-gatheringnetwork-security+3

102 years ago

watchTowr-vs-Splunk-CVE-2026-20253

watchtowrlabs/watchtowr-vs-splunk-cve-2026-20253

exploitationinformation-gatheringpenetration-testing+3

132 months ago

Vulnerability-Assessment-Exploitation-Lab

mirza-22144/vulnerability-assessment-exploitation-lab

Full-lifecycle penetration test of a legacy Linux environment (Metasploitable 2) emulated on Apple Silicon. Demonstrating network reconnaissance, RCE…

cryptographyeducationexploitation+9

7 months ago