Automatic SQL injection and database takeover tool
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
An open-source post-exploitation framework for students, researchers and developers.
The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.
Automated Ξll-in-One OS command injection exploitation tool.
Automated NoSQL database enumeration and web application exploitation tool.
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
A tool for remote ADB exploitation in Python3 for all Machines.
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v