XNU AIO kevent use-after-free — kernel panic from app sandbox on iOS 26.2 (no entitlements). Patched in iOS 26.3

Tests your WAF with +160 payloads

A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.

The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbitrary binaries and scripts using any of our nine supported cl…

COM-based DLL Surrogate Injection

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

Payloads for AI Red Teaming and beyond

Using Socks4/5 or http proxies to make a multithreading Http-flood/Https-flood (cc) attack.

🐸 Rybbit - the open-source and privacy alternative to Google Analytics that is 10x more intuitive.

xVision is a plugin for the JadX decompiler that aims to integrate with Large Language Models (LLMs) to provide code analysis directly in the JAdX.

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

A New Approach to Directory Bruteforce with WaybackLister v1.0

The Repository contains various payloads, tools, tips and tricks from various hackers around the world. Please take a quick look down here 👇👇

An efficient multi-threaded DNS resolver validator

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Library to generate / parse / compare ssdeep Context Triggered Piecewise Hashes (CTPH)

Checks if an Android application has successfully completed the "App Link Verification" process for Android App Links.

The recursive internet scanner for hackers. 🧡

Prompt, run, edit, and deploy full-stack web applications using any LLM you want!

GoFOFA is a command-line tool for the FOFA API written in Golang.

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

a drop-in replacement for Nmap powered by shodan.io

🤖 The Modern Port Scanner 🤖

A Rust implementation of MinHash trying to be parsimonious with memory.

Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现（已有11wPOC，已校验有效性并去重）

TerminatorZ is a highly sophisticated and efficient web security tool that scans for top potential vulnerabilities with known CVEs in your web applications.

Pentest Report Generator

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration