Tools

justakazh/sicat

Multi-source vulnerability and exploit aggregator with auto-discovery via Nmap and Wappalyzer, searching Exploit-DB, NVD, CVE.org, GitHub, Nuclei,…

catsploit/catsploit

Automated penetration testing tool using Cyber Attack Techniques Scoring (CATS) to select and execute optimal attack scenarios via Metasploit, Nmap,…

sobri3195/pegasus-pentest-arsenal

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

shellkraft/anvil

Anvil is a runtime-first attack surface assessment tool for Windows thick client applications, built for penetration testers and security researchers…

cappricio-securities/burpflow

BurpFlow is one of the best Burp Suite automation tools for bug bounty hunters and penetration testers, widely used to load recon data via proxy and…

gibran-abdillah/cve-2023-32315

Automated exploit tool for CVE-2023-32315 authentication bypass vulnerability. Scans single or bulk targets with multiprocessing and automatic login…

chrisbarack/cve-2025-55182

Technical penetration testing writeup demonstrating exploitation of CVE-2025-55182 in Next.js, credential harvesting from SQLite, and privilege…

ghxstsec/cve-2026-39987

Exploit for Marimo pre-auth RCE via terminal WebSocket, providing command execution, interactive PTY shell, and reverse shell capabilities for…

iknowjason/spb

Scripts for testing Shortest Path Bridging (SPB-Mac) vulnerabilities, including CVE-2016-2783 enumeration on Avaya VOSS Ethernet switches during…

emilliewatson96/sprycve-2026-10520

Python-based exploit module targeting CVE-2026-10520 with automated payload delivery and vulnerability verification for penetration testing…

erman-bolukbasi/web-penetration-drupal

Penetration test of a Drupal web app — CVE-2018-7600 (Drupalgeddon 2) exploited using Nmap, Burp Suite & Metasploit | Internship @ BB CyberSec

lpyydxs/cve-2021-40539

Exploit for CVE-2021-40539: RCE in Zoho ManageEngine ADSelfService Plus. Includes detection script, Fofa search syntax, and webshell deployment for…

nexblade12/cve-2024-24919

Exploit for CVE-2024-24919, targeting a specific vulnerability for penetration testing and security assessment purposes.

s4muraimelayu1337/cve-2022-29469

Exploit script for CVE-2022-29469, a web application vulnerability, providing automated exploitation for penetration testing and security assessment.

randynin/cve-2023-4220

Automated exploit tool for CVE-2023-4220, enabling rapid vulnerability exploitation and penetration testing against affected targets.

real-tim-johnston/megaquagga-pentest-report

Black box penetration test — WordPress exploitation, privilege escalation via CVE-2022-0847

imjdl/cve-2022-46169

Python exploit script for CVE-2022-46169 targeting a specific web application vulnerability. Designed for penetration testers to verify and…