Tools

redhuntlabs/kubestalk

Black-box Kubernetes attack surface discovery tool that probes for unsecured clusters, exposed dashboards, and misconfigurations using…

lawiet47/autoresponder

Automates incident response tasks via Carbon Black Response API: file/registry deletion, process killing, sensor isolation, binary collection, and…

jianrongxiao-linksys/dnsmasq-cve-2026

Automated defect verification tool for 6 dnsmasq CVEs (CVE-2026-2291, 4890, 4891, 4892, 4893, 5172)

offensive-hub/black-widow

GUI based offensive penetration testing tool (Open Source)

owasp/vbscan

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

dayiliwaseem/cve-2022-39196-

Black board CMS Escalation of Privileges

denizparlak/blackhat-arsenal-tools

Black Hat Arsenal Tools Official Account

dor00tkit/cve-2024-38144

CVE-2024-38144 - DoS PoC

varbaek/xsser

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

g0ldencybersec/easyeasm

Zero-dollar attack surface management tool

xbxarchivr/unisocunlocker

Free and Open-Source FRP Remover based on CVE-2022-38694

ngyanch/4062-1

CVE-2008-0128

kkamagui/napper-for-tpm

TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019

zux0x3a/dns-black-cat

Multi platform toolkit for an interactive DNS shell commands exfiltration, by using DNS-Cat you will be able to execute system commands in shell mode…

trerb/markdown-exfil-tester

Black-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in…

enzolovesbacon/inficere

Mac OS X rootkit - for learning purposes

ffri/xprtestsuite

A collection of scripts and documents to help future XProtect Remediator (XPR) research