Exploitation Open Source Projects

Automatic SQL injection and database takeover tool

A collection of hacking tools, resources and references to practice ethical hacking.

fsociety Hacking Tools Pack – A Penetration Testing Framework

The Browser Exploitation Framework Project

An open-source post-exploitation framework for students, researchers and developers.

A repository for learning various heap exploitation techniques.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A collection of links related to Linux kernel security and exploitation

Course materials for Modern Binary Exploitation by RPISEC

Automated All-in-One OS Command Injection Exploitation Tool

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Automated Mass Exploiter

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Cybersecurity oriented awesome list

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

UNIX-like reverse engineering framework and command-line toolset.

Automation for internal Windows Penetrationtest / AD-Security

Automatic SSRF fuzzer and exploitation tool

A Curated list of IoT Security Resources

Hash collisions and exploitations

File upload vulnerability scanner and exploitation tool.

Automated NoSQL database enumeration and web application exploitation tool.

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

Offensive Software Exploitation Course

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

awesome list of browser exploitation tutorials

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Tools for Pentesting

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

A curated list of resources related to Industrial Control System (ICS) security.

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

Build a database of libc offsets to simplify exploitation

The Offensive Manual Web Application Penetration Testing Framework.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Awesome tools to exploit Windows !

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

iOS/macOS/Linux Remote Administration Tool

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

Awesome Pentest Tools Collection

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Modular Post‑Exploitation, and Scriptable Agents.

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

AndroRAT | Remote Administrator Tool for Android OS Hacking

Resources for Windows exploit development

Post Exploitation Collection

Tutorials for getting started with Pwntools

Advanced dork Search & Mass Exploit Scanner

List of Awesome Advanced Windows Exploitation References

A collection of links related to VMware escape exploits