Exploit

pentest-ai is an AI-driven penetration testing tool that verifies exploit findings by re-executing them rather than trusting scanner output,...

Yakit is an interactive cybersecurity testing platform that serves as a unified frontend to Yaklang, a custom domain-specific language for security...

Nuclei POC is a centralized repository that aggregates, categorizes, and maintains 410,000+ vulnerability proof-of-concept templates for the Nuclei...

XMiR-Patcher is a firmware patcher for Xiaomi routers that enables users to apply custom modifications and patches to device firmware. It serves a...

This is a curated collection of APT (Advanced Persistent Threat) reports, malware samples, and IOCs (Indicators of Compromise) focused on threat...

A comprehensive, curated collection of cybersecurity resources, scripts, tools, and training materials covering ethical hacking, penetration testing,...

PoC-in-GitHub is an automated collection tool that gathers proof-of-concept exploits and vulnerability demonstrations from GitHub, designed for...

A curated, community-maintained collection of links to Linux kernel security research, exploitation techniques, tools, and educational resources. It...

Pwntools is a CTF framework and exploit development library written in Python, designed for rapid prototyping of security exploits and binary...

A curated collection of reverse-engineered Apple formats, protocols, and hardware specifications, served as machine-readable YAML data and Jekyll...

Awesome Hacking Resources is a curated index repository collecting links to learning materials, tools, and references for penetration testing,...

CVE PoC is an automated aggregation repository that collects and organizes publicly available proof-of-concept exploits for CVEs, organized by year...

A curated collection of search engines and tools for security professionals conducting penetration testing, vulnerability assessments, and threat...

A curated reference database of default credentials for 3,711+ product/vendor combinations, designed for both red teamers (penetration testing) and...

PhoneSploit Pro is a specialized penetration testing tool for Android devices that automates exploitation via ADB and Metasploit Framework to obtain...

GEF is a Python-based GDB enhancement tool that extends GNU Debugger with advanced capabilities for exploit development, reverse engineering, and...

This project automatically aggregates proof-of-concept (POC) and exploit (EXP) code from GitHub, indexed by CVE ID. It serves security researchers,...

A curated collection of penetration testing POCs, exploits, scripts, and tools organized by attack vector (IoT, web, privilege escalation, etc.),...

Copy Fail (CVE-2026-31431) is a security research project documenting and providing an exploit for a 9-year-old Linux kernel local privilege...

WES-NG is a specialized security assessment tool that analyzes Windows system information to identify missing patches and corresponding known...

Awesome-Redteam is a bilingual (Chinese/English) curated knowledge base and resource directory for red teaming and offensive security operations. It...

OneGadget is a specialized CTF/exploit development tool that automatically finds one-gadget RCE (remote code execution) chains in libc.so.6 across...

A curated list repository of free GPT prompts, jailbreaks, and AI agent configurations that do not require paid subscriptions, organized by use case...

ysoserial is a proof-of-concept tool for generating Java deserialization attack payloads using gadget chains from common libraries. It is specialized...

This is a proof-of-concept security research tool that demonstrates a privacy vulnerability in WhatsApp and Signal by measuring Round-Trip Time (RTT)...