A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

A helpful Java Deserialization exploit framework.

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

ADB For Hackers (:

Brainfuck interpreter inside printf

fireELF - Fileless Linux Malware Framework

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

OWASP Xenotix XSS Exploit Framework is an advanced Cross Site Scripting (XSS) vulnerability detection and exploitation framework.

A Go-based Exploit Framework

Router EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedded devices.

Modular penetration testing platform that enables you to write, test, and execute exploit code.

vMass Bot :hook: Vulnerability Scanner & Auto Exploiter Tool Written in Perl.

An Xdbg Plugin of the ERC Library.

Browser Exploitation Framework is a Open-source penetration testing tool that focuses on browser-based vulnerabilities .This Python Script does the changes Required to make hooked Linked Accessible Over WAN .So anyone can use this framework and Attack Over WAN without Port Forwarding [NGROK or any Localhost to Webhost Service Required ]

Exploit management framework

Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads.

AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. It is our hope that this tool will be useful to red teams over the short term, while over the long term help AV/EDR vendors improve how they handle AHK scripts.

Responsive Command and Control System

Very simple script(s) to hasten binary exploit creation

extensible exploitation framework shipped on a modular multi-tasking architecture

Sifter - All purpose penetration testing op-center

A Ruby micro-framework for writing and running exploits

Simple Powershell Http shell With WEB UI

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

G3nius Tools Sploit is a penetration testing tool with a lot of plugins for advanced cybersecurity attacks. User-friendly, Easy and modular!

Exploit toolkit