Exploitation Tools

997 tools
Mazesec-writeups
Mazesec-writeups
Free Exploitation

Mazesec团队自制靶机题解仓库,专注于分享HackMyVM平台的自制靶机PDF题解,涵盖渗透测试实战与安全研究,供学习交流使用。

mcp-shodan
mcp-shodan
Open Source Exploitation Reconnaissance

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works wit…

mediator
mediator
Open Source Exploitation Forensics

An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.

mercator
mercator
Open Source Exploitation

Mapping the information system / Cartographie du système d'information

Mercurial-Grabber
Mercurial-Grabber
Free Exploitation

Grab Discord tokens, Chrome passwords and cookies, and more

Metasploit Framework
Metasploit Framework
Open Source Kali Exploitation Post-Exploitation

The world's most widely used penetration testing framework. Provides hundreds of exploit modules, payloads, encoders, and post-exploitation …

metasploit-ai
metasploit-ai
Free Kali Exploitation

Metasploit-AI is a cutting-edge cybersecurity framework that combines the power of Metasploit with advanced artificial intelligence and mach…

Metasploit-termux
Metasploit-termux
Open Source Exploitation

Install Latest Metrasploit In Termux (2026). Features automatic Ruby 3.4+ Nokogiri/Gumbo patches, PostgreSQL auto-fix, and silent installati…

MikrotikAPI-BF
MikrotikAPI-BF
Open Source Exploitation Password Attacks

RouterOS Attack & Exploitation Framework — 40 CVE/EDB exploits, MAC-Server L2, credential decoder, NPK analyzer, 300-thread BF, Nmap NSE aut…

missing-cve-nuclei-templates
missing-cve-nuclei-templates
Open Source Exploitation Web Application

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests a…

mlattacks
mlattacks
Free Exploitation

Machine Learning Attack Series

MobaXtermDecryptor
MobaXtermDecryptor
Open Source Exploitation

A simple MobaXterm password extraction tool.

MockSSH
MockSSH
Free Exploitation

Mock an SSH server and define all commands it supports (Python, Twisted)

Modern-Red-Team-Infrastructure
Modern-Red-Team-Infrastructure
Free Evasion Exploitation

A comprehensive modern architecture model is proposed to integrate platform solutions and tooling to support a professional Red Team.

Morefixes
Morefixes
Free Exploitation

MoreFixes: A Large-Scale Dataset of CVE Fix Commits Mined through Enhanced Repository Discovery

Morgan
Morgan
Open Source Exploitation

Morgan is a powerful tool designed to help security researchers, developers, and security auditors identify sensitive information, vulnerabi…

mqtt-pwn
mqtt-pwn
Open Source Exploitation Reconnaissance

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

ms-exchange-version-nse
ms-exchange-version-nse
Open Source Exploitation Scanning & Enumeration

Nmap script to detect a Microsoft Exchange instance version with OWA enabled.

MS-RPC-Fuzzer
MS-RPC-Fuzzer
Open Source Exploitation

Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By foll…

msfvenom
msfvenom
Open Source Kali Evasion Exploitation

Metasploit standalone payload generator and encoder. Creates payloads for all platforms with customizable encoders, iterations, and formats …

MSSprinkler
MSSprinkler
Open Source Exploitation

MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts from an external perspective. It employ…

MSSQLand
MSSQLand
Open Source Exploitation

Interract with Microsoft SQL Server (MS SQL | MSSQL) servers and their linked instances in restricted environments, without the need for com…

MTKPI
MTKPI
Open Source Exploitation

🧰 Multi Tool Kubernetes Pentest Image

mwemu
mwemu
Open Source Evasion Exploitation

It's a hardware emulator + OS process simulator implemented in pure rust.