Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Repository Index
47,133 repositories indexed
1–24 of 38 · Most stars
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
CTF framework and exploit development library
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
- python
- gdb
- pwndbg
- reverse-engineering
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
PEDA - Python Exploit Development Assistance for GDB
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
OpenDILab Decision AI Engine. The Most Comprehensive Reinforcement Learning Framework B.P.
- reinforcement-learning
- multiagent-reinforcement-learning
- self-play
- imitation-learning
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
Malware exploits
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client