Armur-Ai / Pentest-Swarm-AI
Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.
Armur-Ai / Pentest-Swarm-AI
VirtualPurser / Far-Cry-3-Value-Forge-resocket
Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit
sqlmapproject / sqlmap
Automatic SQL injection and database takeover tool
nicocha30 / ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
ljagiello / ctf-skills
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
rizinorg / rizin
UNIX-like reverse engineering framework and command-line toolset.
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
malwaredllc / byob
An open-source post-exploitation framework for students, researchers and developers.
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
0xor0ne / awesome-list
Cybersecurity oriented awesome list
ViRb3 / magisk-frida
🔐 Run frida-server on boot with Magisk, always up-to-date
glask1d / WebHawk
The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.
xairy / linux-kernel-exploitation
A collection of links related to Linux kernel security and exploitation
commixproject / commix
Automated Αll-in-One OS command injection exploitation tool.
Ne0nd0g / merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
a13xp0p0v / linux-kernel-defence-map
Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
jm33-m0 / emp3r0r
Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
nikaiw / VMkatz
Extract Windows credentials directly from VM memory snapshots and virtual disks
tigerneil / awesome-deep-rl
For deep RL and the future of AI.
xalgorix / xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
S3N4T0R-0X0 / APTs-Adversary-Simulation
This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks.
GamehunterKaan / AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
prbhtkumr / PhoneSploit
A tool for remote ADB exploitation in Python3 for all Machines.
actuator / Android-Security-Exploits-YouTube-Curriculum
🔓A Curated List Of Modern Android Exploitation Conference Talks
devploit / awesome-ctf-resources
A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩
b23r0 / Heroinn
A cross platform C2/post-exploitation framework.
DoS0x99 / cyber-security-books
A collection of FREE cyber security books
Frissi0n / GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
SIA-IOTechnology / Kittysploit-framework
Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....
mito753 / Kernel-Exploit-Dojo
CTF kernel exploitation notes, PoCs, exploits, and writeups.
bcoles / kasld
KASLD defeats Linux kernel KASLR from a local process — recovering the virtual and physical memory layout where a leak or side channel allows, and narrowing it to the smallest set of placements the evidence supports otherwise.
Arcanum-Sec / wraith
WRAITH — a modern browser-hooking framework (BeEF + blind-XSS successor) for red teams, researchers, and educators. For authorized security testing, research & education only.
DeathShotXD / 0xM0nCrush
Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
scottalt / senior-securityengineer-cybersecuritybookmarks
A senior security engineer's actual browser bookmarks. 40+ curated cybersecurity resources for recon, OSINT, exploitation, privilege escalation, and malware analysis.
DeathShotXD / Comment2Shell
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
DeathShotXD / 0xCr0ssCrush
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
armourinfosec / Offensive-File-Transfer-Techniques
Offensive File Transfer Techniques — hands-on study notes on moving files to and from a target during an engagement across every channel: HTTP/SMB/FTP/TFTP/WebDAV, netcat/socat, scp/rsync, LOLBAS/GTFOBins, base64 no-egress, Meterpreter, plus detection. CC BY 4.0.
armourinfosec / Offensive-Windows-Privilege-Escalation
Offensive Windows Privilege Escalation — hands-on study notes: enumeration & methodology, service/scheduled-task misconfigs, UAC bypass, token-privilege abuse, the potato family, kernel exploits, and credential mining. Each technique with detection & defenses. CC BY 4.0.
SagarBiswas-MultiHAT / The-BlackHAT-roadmap
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
X1NONs / C-for-exploit-development
The Exploit Development Trilogy. A free, zero-to-hero guide covering C programming, reverse engineering, and modern memory corruption. Master the stack, heap, ROP, and kernel exploitation.
tc4dy / CVE-2026-54121-PoC-Exploit
CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v
security-attack / RingKiller
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.
beefproject / beef
The Browser Exploitation Framework Project