Automatic SQL injection and database takeover tool
Repository Index
47,133 repositories indexed
1–24 of 38 · Most stars
Most advanced XSS scanner.
CTF framework and exploit development library
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
An all-in-one hacking tool to remotely take over Android devices.
PEDA - Python Exploit Development Assistance for GDB
Automated Αll-in-One OS command injection exploitation tool.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
OpenDILab Decision AI Engine. The Most Comprehensive Reinforcement Learning Framework B.P.
Automated NoSQL database enumeration and web application exploitation tool.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
The Offensive Manual Web Application Penetration Testing Framework.
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Find exploit tool
Malware exploits
Samsung Tizen root
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.