Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
47,133 repositories indexed
1–24 of 29 · Most stars
Automatic SQL injection and database takeover tool
GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
The Browser Exploitation Framework Project
Course materials for Modern Binary Exploitation by RPISEC
Automated Αll-in-One OS command injection exploitation tool.
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
UNIX-like reverse engineering framework and command-line toolset.
OpenDILab Decision AI Engine. The Most Comprehensive Reinforcement Learning Framework B.P.
Automated NoSQL database enumeration and web application exploitation tool.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
The Offensive Manual Web Application Penetration Testing Framework.
Linux Binary Exploitation
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
DNS Rebinding Exploitation Framework
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
A collection of awesome videos, articles, books and resources about ARM exploitation.
Simplify format string exploitation.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
This is an aspiring project aimed at accumulating knowledge from the world of cybersecurity and presenting it in a cogent way, so it is accessible to as large an audience as possible and so that everyone has a good resource to learn hacking from.