Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

2069 results

CVE-2021-2394

fasanhlieu/cve-2021-2394

Proof-of-concept exploit for CVE-2021-2394, demonstrating a specific vulnerability in a web application framework.

exploitationvulnerability-analysisweb-application-exploitation

2 years ago

APKHunt

cyber-buddy/apkhunt

Static code analysis tool for Android apps based on OWASP MASVS, detecting security vulnerabilities in APK files with low false-positive rates and…

android-securitycode-analysismobile-security+3

9751 year ago

fuzzdb

fuzzdb-project/fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

curated-resourcesdns-fuzzingfuzzing+4

9.0k6 years ago

railsgoat

owasp/railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

code-analysisctfeducation+5

9236 days ago

grepmarx

orange-cyberdefense/grepmarx

A source code static analysis platform for AppSec enthusiasts.

code-analysisdevsecopsstatic-analysis+3

2816 months ago

xvna

vegabird/xvna

Extreme Vulnerable Node Application

educationlabs-practicepenetration-testing+2

958 years ago

faraday_burp

infobyte/faraday_burp

Burp Extension for collaboration in Faraday

api-security-testingdevsecopspenetration-testing+3

131 year ago

CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata

george0papasotiriou/cve-2026-3333-dns-rebinding-to-steal-cloud-metadata

Python exploit for CVE-2026-3333 demonstrating DNS rebinding to access cloud metadata and steal IAM credentials through an SSRF-vulnerable web app.

cloud-securitydata-exfiltrationexploitation+4

1 month ago

Final-project-SQL-injection-pipeline

mlily2024/final-project-sql-injection-pipeline

Hybrid machine-learning pipelines for detecting SQL injection in web traffic, combining DistilBERT and BERT-GNN models with adversarial training and…

anomaly-detectioneducationmachine-learning+3

1 month ago

Log4Shell-PoC-Application

nikitapark/log4shell-poc-application

Log4Shell (CVE-2021-44228) PoC Application

educationexploitationpenetration-testing+2

1 year ago

https-github.com-pravin-pp-log4j2-CVE-2021-45105-1

dileepdkumar/https-github.com-pravin-pp-log4j2-cve-2021-45105-1

Sample Spring Boot application intentionally vulnerable to Log4j2 CVE-2021-45105 for practicing exploitation and understanding infinite loop…

educationexploitationlabs-practice+3

4 years ago

vaas-cve-2014-6271

hmlio/vaas-cve-2014-6271

Vulnerability as a service: showcasing CVS-2014-6271, a.k.a. Shellshock

container-securityeducationexploitation+3

226 years ago

Demo-Exploit-Jackson-RCE

javanxd/demo-exploit-jackson-rce

Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.

educationexploitationlabs-practice+2

187 years ago

apk-interceptor

sterrasec/apk-interceptor

Android deeplink, Intent, and WebView bridge assessment helper for ethical hacking

android-securityinformation-gatheringmobile-app-pentesting+3

82 months ago

CVE-2023-27587-PoC

vagnerd/cve-2023-27587-poc

The simple PoC of CVE-2023-27587

api-securityexploitationinformation-gathering+3

53 years ago

CVE-2016-3088

cyberaguiar/cve-2016-3088

Apache ActiveMQ Remote Code Execution Exploit

exploitationpenetration-testingremote-access-tool+2

55 years ago

recon-test-livewire

luisdalmolin/recon-test-livewire

Test target: fresh Laravel 12 app with Livewire pinned to vulnerable 3.6.3 (CVE-2025-54068) for recon scanning

educationlabs-practicepenetration-testing+3

2 months ago

CVE-2025-45960

pracharapol/cve-2025-45960

Proof-of-concept for a stored cross-site scripting (XSS) vulnerability in tawk.to Live Chat 1.6.1, demonstrating JavaScript injection via unsanitized…

exploitationpenetration-testingvulnerability-analysis+2

51 year ago