Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Repository Index
47,133 repositories indexed
1–24 of 32 · Most stars
CTF framework and exploit development library
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
- python
- gdb
- pwndbg
- reverse-engineering
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
PEDA - Python Exploit Development Assistance for GDB
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Malware exploits
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy