Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Repository Index
47,133 repositories indexed
49–72 of 82 · Most stars
Malware exploits
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
DNS Rebinding Exploitation Framework
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
Bypass SmartScreen! Use a signed executable as the launcher to reduce Microsoft Defender SmartScreen warnings when running your code. You do not need to sign the executable itself, only the DLL.
- bypass-defender
- bypass-detection
- smartscreen-bypass
- bypass-wd
A collection of awesome videos, articles, books and resources about ARM exploitation.
Simplify format string exploitation.
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.
Android Framework for Exploitation, is a framework for exploiting android based devices
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
collection of C/C++ programs that try to get compilers to exploit undefined behavior
🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.
- ai-hacking
- ai-security-tool
- cve-scanning
- cve-tools
Public repository for improvements to the EXTRABACON exploit
lua code export save to be run on seedsow switch demo exploit
AltLoad is a tool that installs AltStore and SideStore completely on-device.
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Detect and log CVE-2019-19781 scan and exploitation attempts.
A process monitoring tool that tries to detect exploitation