Top #exploit Tools & Software

x64dbg

github

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

sqlmap

github

Automatic SQL injection and database takeover tool

routersploit

github

Exploitation Framework for Embedded Devices

nuclei-templates

github

Community curated list of templates for the nuclei engine to find security vulnerabilities.

awesome-hacker-search-engines

github

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

cve

github

Gather and update all available and newest CVEs with their PoC.

PoC-in-GitHub

github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

yakit

github

Cyber Security ALL-IN-ONE Platform

Active-Directory-Exploitation-Cheat-Sheet

github

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

linux-kernel-exploitation

github

A collection of links related to Linux kernel security and exploitation

Ladon

github

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange

AutoSploit

github

Automated Mass Exploiter

CTF-All-In-One

github

CTF竞赛权威指南

kscan

github

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

vulscan

github

Advanced vulnerability scanning with Nmap NSE

rizin

github

UNIX-like reverse engineering framework and command-line toolset.

APT_REPORT

github

Interesting APT Report Collection And Some Special IOCs

Penetration-Testing-Tools

github

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

SSH-Snake

github

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

SpringBoot-Scan

github

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具