Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

51 results

RF-CHAOS

scramblr/rf-chaos

RF CHAOS is an Android App That Is Designed To Cause Chaos via All RF Adapters Possible - Enjoy!

bluetooth-securityexploitationinformation-gathering+7

375 months ago

hinge-command-control-c2

matthewwiese/hinge-command-control-c2

A proof of concept demonstrating how to use the Hinge dating app as a C2.

command-and-controlosintpenetration-testing+3

118 months ago

ESFileExplorerOpenPortVuln

fs0c131y/esfileexploreropenportvuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447

android-securitydata-exfiltrationexploitation+5

6787 years ago

COVIDSafe-CVE-2020-12856

alwentiu/covidsafe-cve-2020-12856

A bluetooth-related vulnerability in some contact tracing apps

android-securitybluetooth-securityexploitation+3

256 years ago

AutoPWN-Suite

gamehunterkaan/autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

exploitationinformation-gatheringnetwork-security+5

1.1k1 month ago

RSC_Detector

mrknow001/rsc_detector

Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.

educationexploitationreconnaissance+2

5929 months ago

second-order

mhmdiaa/second-order

Crawls web applications to detect second-order subdomain takeover vulnerabilities by collecting URLs and matching configurable rules for non-200…

crawlerreconnaissancesubdomain-enumeration+2

4081 year ago

kanha

pwnwriter/kanha

🦚 A web-app pentesting suite written in rust .

dns-subdomain-enumerationfuzzinginformation-gathering+5

3251 year ago

PCWT

ascr0b/pcwt

Web-based project management interface for penetration testing and bug bounty workflows, automating port scanning with Nmap/Masscan and subdomain…

information-gatheringpenetration-testingpenetration-testing-frameworks+5

465 years ago

ONUS

maverickaayush/onus

Locally-hosted, air-gapped VAPT platform that runs 8 parallel scanning modules, deterministically scores findings with CVSS v3.1, and generates PDF…

ai-securitydns-subdomain-enumerationeducation+6

119 days ago

SkyProfile

alsatianconsulting/skyprofile

A lightweight aviation intelligence tool that queries ADSB-Exchange flight data using tail numbers or ICAO identifiers to quickly profile aircraft…

data-exfiltrationinformation-gatheringosint+3

98 months ago

CVE-2025-55182-Exploit-extension

anuththara2007-w/cve-2025-55182-exploit-extension

A Chrome extension for detecting React2Shell vulnerabilities (CVE-2025-55182 & CVE-2025-66478) in web applications

educationinformation-gatheringreconnaissance+2

33 months ago

Confluence-Question-CVE-2022-26138-

vulnmachines/confluence-question-cve-2022-26138-

Atlassian Confluence Server and Data Center: CVE-2022-26138

exploitationinformation-gatheringpassword-attacks+3

34 years ago

CVE-2026-45156-POC

cybertechajju/cve-2026-45156-poc

This repository contains the Proof of Concept (PoC) exploit script for CVE-2026-45156

authentication-authorizationexploitationpenetration-testing+3

22 months ago

CVE-2025-55182-Exploiter

alfazhossain/cve-2025-55182-exploiter

CVE-2025-55182-Exploiter Google Chrome Extension. nextjs vulnerability #nextjscve

exploitationinformation-gatheringpenetration-testing+3

49 months ago

CVE-2026-54350-Budibase-NoSQL-Injection

biitts/cve-2026-54350-budibase-nosql-injection

PoC for CVE-2026-54350 — Budibase unauthenticated NoSQL operator injection (CVSS 10.0). Read/mass-write any document collection via a PUBLIC query.

database-securityexploitationpayload-development+4

2 months ago

Archived

OffensiveNotion

mttaggart/offensivenotion

Notion as a platform for offensive operations

command-and-controlpayload-developmentpenetration-testing-frameworks+6

1.2k3 years ago

androrat

wszf/androrat

androrat

android-securitycommand-and-controldata-exfiltration+6

2.0k6 years ago