Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

1576 results

proxylogscan

dwisiswant0/proxylogscan

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as…

exploitationinformation-gatheringpenetration-testing+3

1644 years ago

CVE-2024-36991

bigb0x/cve-2024-36991

POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.

exploitationinformation-gatheringpenetration-testing+2

1272 years ago

fuckshitup

smaash/fuckshitup

php-cli vulnerability scanner

information-gatheringpassword-attackspenetration-testing+2

7911 years ago

TheDoc

offxec/thedoc

Automates SQL injection exploitation with SQLMAP, crawls for vulnerabilities, extracts database credentials, finds admin login pages, and cracks…

information-gatheringpassword-crackingvulnerability-scanners+1

978 years ago

CISCO-CVE-2020-3452-Scanner-Exploiter

darklotuskdb/cisco-cve-2020-3452-scanner-exploiter

CISCO CVE-2020-3452 Scanner & Exploiter

exploitationinformation-gatheringpenetration-testing+3

995 years ago

hopgoblin

assetnote/hopgoblin

Adobe Experience Manager (AEM) hacking toolkit

information-gatheringmisconfigurationpenetration-testing+3

11610 months ago

wp2shell-scanner

zephrfish/wp2shell-scanner

CVE-2026-63030, CVE-2026-60137, wp2shell scanner

code-analysisexploitationinformation-gathering+5

531 month ago

CVE-2017-7921-EXP

jrdw0/cve-2017-7921-exp

Hikvision camera CVE-2017-7921-EXP

exploitationinformation-gatheringiot-security+3

1026 years ago

wpbf

atarantini/wpbf

Remotely test password strength of WordPress bloging software

information-gatheringpassword-attackspenetration-testing+3

10710 years ago

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

malayke/cve-2023-33246_rocketmq_rce_exploit

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

command-and-controlexploitationinformation-gathering+6

1043 years ago

blackjump

tarihub/blackjump

JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021

command-and-controlexploitationinformation-gathering+3

2761 year ago

CVE-2026-45504

hawktrace/cve-2026-45504

CVE-2026-45504 Microsoft Exchange File Read

exploitationinformation-gatheringpenetration-testing+2

611 month ago

nextssrf

ynsmroztas/nextssrf

CVE-2026-44578 scanner and exploit tool for SSRF in Next.js WebSocket upgrade handler. Detects vulnerable versions, extracts cloud metadata, and…

cloud-securityexploitationinformation-gathering+3

773 months ago

CVE-2021-42321

darksprings/cve-2021-42321

Microsoft Exchange Server Poc

exploitationinformation-gatheringpenetration-testing+2

834 years ago

WebLogic_CNVD_C2019_48814

7kbstorm/weblogic_cnvd_c2019_48814

WebLogic CNVD-C-2019_48814 CVE-2017-10271 Scan By 7kbstorm

exploitationinformation-gatheringpenetration-testing+2

1147 years ago

CVE-2020-8193

jas502n/cve-2020-8193

Citrix ADC Vulns

exploitationinformation-gatheringpenetration-testing+3

886 years ago

CVE-2024-21893.py

h4x0r-dz/cve-2024-21893.py

CVE-2024-21893: SSRF Vulnerability in Ivanti Connect Secure

exploitationinformation-gatheringpenetration-testing+3

942 years ago

grafana-ssrf

randomrobbiebf/grafana-ssrf

Authenticated SSRF in Grafana

cloud-securityexploitationinformation-gathering+4

832 years ago