Tools

dinosn/mikrotrick-poc

CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC

quentinhardy/odat

Penetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…

preludeorg/cua-kit

Tools for attacking Computer Use Agents

kozmer/aad-bofs

Cobalt Strike BOF collection for attacking Azure AD during red team operations, covering authentication, enumeration, and post-exploitation vectors.

hondamunigeprasannasilva/attack-attention

[CVPR 2025-ADVML] Official Repository for `Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks`

qtc-de/beanshooter

JMX enumeration and attacking tool.

nidem/kerberoast

Toolkit for attacking MS Kerberos implementations: extract SPN accounts, request and export tickets, crack service passwords, rewrite tickets for…

thunlp/openattack

An Open-Source Package for Textual Adversarial Attack.

jamescooteuk/sharpsphere

.NET Project for Attacking vCenter

randomrobbiebf/wp-file-manager

wp-file-manager RCE

esc0rtd3w/wifi-hacker

Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)

sabersebri/wpscvn

wpscvn is a tool for pentesters, website owner to test if their websites had some vulnerable plugins or themes

quickbreach/smbetray

SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in…

m4lv0id/lare

[L]ocal [A]uto [R]oot [E]xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim…

xyl2k/black-eye-rsa-attacking-toolkit-v0.1f-compiled

The great RSA Attacking Toolkit compiled for Windows