LinkFinder

About LinkFinder LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. This way penetration testers and bug hunters are able to gather new, hidden endpoints on the websites they are testing. Resulting in new testing ground, possibility containing ne...

zk-xml-probe

zk-xml-probe Static XML fixtures for authorized bug bounty testing of XML parser behaviour CVE-2026-45071...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

METATRON

METATRON AI-powered penetration testing assistant using local LLM on linux Parrot OS 🔱 METATRON AI-Powered Penetration Testing Assistant 📌 What is Metatron? Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine — no cloud, no API keys, no subscriptions...

WindowsProtocolTestSuites

Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...

pentest-ai-agents

pentest-ai-agents 50 Claude Code subagents for penetration testing. Quick Start | Cheatsheet | Coverage | Agents | Examples Table of Contents What's New in v3.3 What's New in v3.2 Agent Map What's New in v3.1 Quick Start Cheatsheet Coverage Agents Tier 1 vs Tier 2 Examples Running Tools in a...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

WEF

WiFi Exploitation Framework Coded with 💙 by D3Ext Introduction • Attacks • Features • Installation • Usage README in spanish Introduction This tool is designed for security researchers and penetration testers to analyze and exploit vulnerabilities in Wi-Fi networks. It provides an intuitive...

MARA_Framework

MARAFramework MARA is a M obile A pplication R everse engineering and A nalysis Framework. It is a tool that puts together commonly used mobile application reverse engineering and analysis tools, to assist in testing mobile applications against the OWASP mobile security threats. Its objective is ...

airbash

airba.sh Airbash is a POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell tested on Kali Linux and Cyanogenmod 10.2 and uses aircrack-ng to scan for clients that are currently connected to access...

cve

CVE PoC Almost every publicly available CVE PoC. Current hottest CVEs Title| URL ---|--- CVE-2022-0001| /trickest/cve/blob/main/2022/CVE-2022-0001.md CVE-2022-25297| /trickest/cve/blob/main/2022/CVE-2022-25297.md CVE-2022-1388| /trickest/cve/blob/main/2022/CVE-2022-1388.md CVE-2022-25451|...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

pciem

PCIem A Linux kernel framework enabling synthetic userspace PCIe device emulation. | Documentation What is PCIem? PCIem is a framework that creates virtual PCIe devices in the Linux kernel by leveraging a few novel techniques to populate synthetic cards as legitimate PCI devices to the host OS. T...

AtomShields

AtomShields |Build| |Codacy| |Docs| |Version| .. |Docs| image:: https://readthedocs.org/projects/atomshields/badge/?version=latest :target: http://atomshields.readthedocs.io/en/latest/?badge=latest :alt: Read the Docs .. |Version| image:: http://img.shields.io/pypi/v/atomshields.svg?style=flat...

vbull

vBulletin Mass Exploit CVE-2019-16759 Alert! This tool was made for penetration testing CVE-2019-16759. We are not responsible for errors made by users of this tool. Installation and usage: $ pkg install git python2 $ pip2 install requests $ git clone https://github.com/psychoxploit/vbull $ cd...

malware_training_vol1

malwaretrainingvol1 Materials for Windows Malware Analysis training volume 1 🚧 WARNING: work in progress! More material will be added gradually. Content The goal of this training it to build understanding of various common techniques used by malware. It contains elements of programming as well as...

CVE-2026-70463

CVE-2026-70463 Testing CVE-2026-70463 by Fyyre For research and educational purposes only!...

snare

SNARE Super Next generation Advanced Reactive honEypot About SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. Documentation The documentation can be found here. Basic Concepts Surface first. Focus on the attack surface generation. Sensors and...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...