gichirimaku / wp2shell-PoC

CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.

sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool

Gallopsled / pwntools

CTF framework and exploit development library

pwndbg / pwndbg

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

malwaredllc / byob

An open-source post-exploitation framework for students, researchers and developers.

SnailSploit / Claude-Red

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

ihebski / DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

AzeemIdrisi / PhoneSploit-Pro

An all-in-one hacking tool to remotely take over Android devices.

BitterSecurity / Decepticon

Autonomous Hacking Agent for Red Team

commixproject / commix

Automated Αll-in-One OS command injection exploitation tool.

bitsadmin / wesng

Windows Exploit Suggester - Next Generation

openwrt-xiaomi / xmir-patcher

Firmware patcher for Xiaomi routers

ljagiello / ctf-skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

samugit83 / redamon

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.

blackorbird / APT_REPORT

Interesting APT Report Collection And Some Special IOCs

vulnersCom / getsploit

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

0xSteph / pentest-ai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

0xMarcio / pocindex

Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

xaitax / SploitScan

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

topscoder / nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

ycdxsb / PocOrExp_in_Github

Automatically Collect POC or EXP from GitHub by CVE ID.

GamehunterKaan / AutoPWN-Suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

laluka / bypass-url-parser

bypass-url-parser

Zyrexnn / Cybermes

Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.

mosecorg / mosec

A high-performance ML model serving framework, offers dynamic batching and CPU/GPU pipelines to fully exploit your compute machine

prbhtkumr / PhoneSploit

A tool for remote ADB exploitation in Python3 for all Machines.

0xricksanchez / like-dbg

Fully dockerized Linux kernel debugging environment for Linux and MacOS

nealbridges / VulnHunter

Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them test-first. A maintained fork of Capital One's VulnHunter, rebuilt for any agent harness.

ARPSyndicate / puncia

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.

Frissi0n / GTFONow

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

SIA-IOTechnology / Kittysploit-framework

Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....

AdnaneKhan / gato-x

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

cvg / vidmap

VidMap: Exploiting Temporal Structure for Video-Based Structure-from-Motion (ECCV 2026)

opaxial / CVE-2026-9830

CVE-2026-9830 Proof of Concept

lordx64 / pentestkit

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104 (100%) on the XBOW validation benchmarks, powered by Kimi K3.

cracken-ai / blacksea

Blacksea is an active honeypot and canary-bait control system built to detect and drown LLM-driven attackers. Blacksea doesn't stop at watching LLM attacks. It exploits flaws in the attacker's LLM judgment to gain arbitrary code execution on their machines, collect intel passive defenses can't reach, and make sure they don't come back.

chris-ritsen / samsung-tv-root

Samsung QN90B and QN90F root

DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

Boreas37 / CVE-2026-64638-PoC-XSS2Shell-

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

Roclp / TI2V-Jailbreak

Code for **"The Price of Consistency: Exploiting Visual Anchors for Multimodal Jailbreaking in Video Generation"** (ACM MM 2026).

Snizi / CVE-2026-18963-Exploit

Exploit for KeyCloak CVE-2026-18963

xiabai2008 / ruoyi-scan

RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器

guneykabel / cve-2026-85706

Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1

glask1d / WebHawk

The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.

pranjalm37 / race-condition-exploiter

TOCTOU race condition research toolkit: vulnerable/patched samples, a CLI race harness, an AST-based scanner, and a live demo

imbas007 / POC-CVE-2026-60206

cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security

tc4dy / CVE-2026-54121-PoC-Exploit

CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v

kaffeindecaf / W0lfSword

iOS kernel exploit toolkit | DarkSword R/W | SSV Bypass | XPF offset verification