#exploits
JNDI-Injection-Exploit
Generates JNDI links can start several servers to exploit JNDI Injection vulnerabilities.
NetExec
Network service exploitation tool that helps automate assessing the security of large networks.
P4wnP1 A.L.O.A.
Turn a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming or PE.
phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor.
Invoke-PSImage
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute.
TrevorC2
A legitimate website that tunnels client/server communications for covert command execution.
SpoolSploit
Collection of Windows print spooler exploits and other utilities for practical exploitation.
GitHacker
A Git source leak exploit tool that restores the entire Git repository, including data from stash.
Windows Exploit Suggester
Compares target patch levels against the Microsoft vulnerability DB to detect missing patches.
SearchSploit
Cli tool for Exploit-DB that also allows you to take a copy of Exploit Database with you.
Shadow Workers
C2 and proxy designed to help in the exploitation of XSS and malicious Service Workers.
XSSer
Automatic framework to detect, exploit and report XSS vulnerabilities in web-based applications.
Evil SQL Client
Interactive .NET SQL console client with enhanced SQL Server discovery/access/exfiltration features.
BeEF
The Browser Exploitation Framework is a penetration testing tool that focuses on the web browser.
