Tools: exploitation (161)

Active Directory ACL exploitation with BloodHound.

Extensible post-exploitation and adversarial emulation framework.

A pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesse

Bruteforce commandline buffer overflows, linux, aggressive arguments.

A rop gadget finder and chain builder.

A simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.

ARM Shellcode Generator (Mostly Thumb Mode).

The UNIX arp cache update utility

Automate the exploitation of remote hosts.

Tool aided persistence via Windows URI schemes abuse.

Steal NTLM Hashes with Bad-PDF.

An AWS Cloud Post Exploitation framework.

The Browser Exploitation Framework that focuses on the web browser.

A post exploitation tool to check common misconfigurations to find a way to escalate our privilege.

Perform checks of single and multiple argument command line overflows and environment variable overflows.

Format String exploit building tool.

A tool to extract database data from a blind SQL injection vulnerability.

A blind SQL injection module that uses bitshfting to calculate characters.

Convert shellcode into different formats.

A container analysis and exploitation tool for pentesters and engineers.

A framework intended to aid those developing exploits.

An interactive reference tool to help security professionals utilize useful payloads and commands.

A camera exploitation tool that allows to disclosure network camera admin password.

Dump NTDS remotely without DRSUAPI: using golden certificate and UnPAC the hash.

Unices chroot breaking tool.

The most complete and advanced IT security professional toolkit on Android.

A tool to perform local searches for known vulnerabilities.

CLI tool designed to provide a structured and easily navigable interface to various vulnerability databases.

Python script that performs dork searching and searches for local file inclusion and SQL injection errors.

Multi-Purpose MySQL Injection Tool

A penetration testing framework for Linux, MacOS, and Windows systems.

Docker Enumeration, Escalation of Privileges and Container Escapes.

NTP Main-in-the-Middle tool.

Dont kill my cat - Malicious payload evasion tool.

A Soundy Vulnerability Detection Tool for Linux Kernel Drivers.

A shellcode testing harness.

Encoding Tools for Rubber Ducky.

This is an encoding tool for 32-bit x86 shellcode that assists a researcher when dealing with character filter or byte r

Message Queue & Broker Injection tool that implements attacks to Redis, RabbitMQ and ZeroMQ.

A set of tools to exploit Netwave and GoAhead IP Webcams.

Tool to exploit epmd related services such as rabbitmq, ejabberd and couchdb by bruteforcing the cookie and gaining RCE

A cross-platform assistant for creating malicious MS Office documents.

The Exploit Database (EDB) – an ultimate archive of exploits and vulnerable software - A collection of hacks

Exploit Pack - The next generation exploit framework.

Exploit for Eye-Fi Helper directory traversal vulnerability

A hacking harness that you can use during the post-exploitation phase of a red-teaming engagement.

A Collection of different ways to execute code outside of the expected entry points.

Exploitation Framework for ATtiny85 Based HID Attacks.

Helper script for working with format string bugs.

Format string exploit generation.

NSA Exploit framework

.NET serialized gadgets that can trigger .NET assembly from JS/VBS/VBA based scripts.

Python script to generate obfuscated .vbs script that delivers payload (payload dropper) with persistence and windows an

A simple tool to scan and exploit redis servers.

Tool for HTTP session sidejacking.

HTTP Vuln Request Crafter.

A tool to exploit HQL Injections.

A Python script that exploits a weakness in the way that .htaccess files can be configured to protect a web directory wi

Collection of classes for working with network protocols.

A FireWire physical memory manipulation and hacking tool exploiting IEEE 1394 SBP DMA.

Generate Payloads and Control Remote Machines .

An exploitation framework based on Python.

Advanced JDWP exploitation and data extraction tool with interactive shell.

A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability, like Jackson, Fastj

A framework that seekss to unite general auditing tools, which are general pentesting tools (Network,Web,Desktop and oth

Kernel privilege escalation enumeration and exploitation framework.

Manipulate Chromecast Devices in your Network.

Framework and tools for exploiting ZigBee and IEEE 802.15.4 networks.

Integration of Clair and Docker Registry.

The Exploit Development Kit.

A python tool that will allow remote execution of commands on a Jenkins server and its nodes.

A Perl script to try to gain code execution on a remote server via LFI.

A tool for generating fake code signing certificates or signing real ones.

An Exploit Dev Swiss Army Knife.

Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass, this tool int

Java Unmarshaller Security - Turning your data into code execution.

A multi-platform application used to audit web sites in order to discover and exploit SQL injection vulnerabilities.

A Python-based Universal Plug-N-Play client application designed to discover, query and interact with UPNP devices.

A Framework for Man-In-The-Middle attacks written in Python.

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

XSS exploitation tool - access victims through HTTP proxy.

This cli is for pentesters, CTF players, or dev. You can modify your jwt, sign, inject, etc.

An N1QL exploitation tool.

Script to enumerate usernames and passwords from vulnerable web applications running MongoDB.

A tool for generating multiple types of NTLMv2 hash theft files.

Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution tec

A security tool implementing "attacks" to be able to the resistance of firewall to protocol level attack.

A simple Python script to exploit the OpenSSH User Enumeration Timing Attack.

Toolbox intended to allow useful exploitation of XML external entity ("XXE") vulnerabilities.

Shellcode/Obfuscate Code Generator.

Checks for PATH substitution vulnerabilities and logs the commands executed by the vulnerable executables.

Little utility to help exploiting blind sql injection vulnerabilities.

Antivirus evasion tool written in python.

Exploitation framework that tests the security of a email content filter.

Tools for Kerberos PKINIT and relaying to AD CS.

Automated exploitation of invalid memory writes (being them the consequences of an overflow in a writable section, of a

An open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

Some helpful preload libraries for pwning stuff.

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

A tool to generate and encode a PowerShell based Metasploit payloads.

The Penetration Testers Framework: Way for modular support for up-to-date tools.

A post-exploitation tool meant to help network pivoting from a compromised unix box.

A post-exploitation platform.

Kerberos Exploitation Kit.

SSH mitm server for security audits supporting public key authentication, session hijacking and file manipulation.

Pythonic argument parser, that will make you smile.

Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.

Router EXploitation Toolkit - small toolkit for easy creation and usage of various python scripts that work with embedde

Exploitation toolkit for RichFaces.

Enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities.

A router exploitation tool that allows to disclosure network router admin password.

A set of python scripts to generate ROP gadgets and payload.

A Return-oriented Programming toolkit.

Free Internet access anywhere, anytime.

A full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries.

A Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

A simple to use USB HID Rubber Ducky Launch Pad for Android.

Tool for automating shellcode creation.

Exploit using barcodes, QRcodes, earn13, datamatrix.

A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions.

Java serialization brute force attack tool.

Compiles C/C++ style code into a small, position-independent and NULL-free shellcode for Windows & Linux.

Tool to create and test shellcodes from custom assembly sources.

A collection of shellcode, loaders, sources, and generators provided with documentation designed to ease the exploitatio

Interactive shellcoding environment to easily craft shellcodes.

Because sometimes you just need shellcode and opcodes quickly. This essentially just wraps some nasm/objdump calls into

New Generation Exploit Development Kit.

A tool to find and exploit servers vulnerable to Shellshock.

A shellcode development tool, created to speed up the various steps needed to create functioning shellcode.

Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP.

Stealing Signatures and Making One Invalid Signature at a Time.

Remote Command Execution as SYSTEM on Windows IoT Core.

Siberas JMX exploitation toolkit.

Shellcode mapper - Handy tool for shellcode analysis.

Small python3 tool to check common vulnerabilities in SMTP servers.

SMB Man in the Middle Attack Engine / relay suite.

SSH man-in-the-middle tool.

Universal stack-based buffer overfow exploitation tool.

This plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/way

Automated Man-in-the-Middle Attack Framework.

Python script which utilizes python's built-in modules to enumerate SUID binaries.

A general tcp protocols testing and hacking utility.

Apache Tomcat auto WAR deployment & pwning penetration testing tool.

Multithreaded SQL union bruteforcer.

A Multi-hop Proxy for Penetration Testers.

VoIP Pen-Test Kit for Metasploit Framework.

A Vulnerability-Exploit desktop finder.

Shell command obfuscation to avoid detection systems.

A cross platform web exploitation toolkit.

Windows Exploit Suggester - Next Generation.

Unix wildcard attacks.

A tool for MITM'ing insecure WSUS connections.

A command line tool to automate the exploitation of blind XPath injection vulnerabilities.

Search exploits in multiple exploit databases!.

Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC.

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

It generates the XML payloads, and automatically starts a server to serve the needed DTD's or to do data exfiltration.

A MySQL injection penetration tool. It has multiple features, proxy support, and multiple exploitation methods.

A network attack tool centered around the exploitation of local networks.

Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems.

Fud Payload generator script.