Exploitation Tools

997 tools
sherlock-rs
sherlock-rs
Open Source Exploitation Forensics

Hunt down social media accounts by username across social networks

ShonyDanza
ShonyDanza
Open Source Exploitation Reconnaissance

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

shortscan
shortscan
Open Source Exploitation

An IIS short filename enumeration tool

sicat
sicat
Open Source Exploitation Reconnaissance

SICAT - The useful vulnerability and exploit finder …

SkyFall-Pack
SkyFall-Pack
Open Source Exploitation Post-Exploitation

Your Skyfall Infrastructure Pack

slack-watchman
slack-watchman
Open Source Exploitation

Slack enumeration and exposed secrets detection tool

SlackPirate
SlackPirate
Open Source Exploitation

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

Sliver
Sliver
Open Source Exploitation Post-Exploitation

Open-source C2 framework from BishopFox. Supports mTLS, WireGuard, HTTP/S, and DNS C2 channels. Features implant generation, pivoting, BOF s…

sliver
sliver
Open Source Kali Exploitation Post-Exploitation

Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform secu…

SlowLoris
SlowLoris
Open Source Exploitation

Asynchronous Python implementation of SlowLoris DoS attack

smokedmeat
smokedmeat
Open Source Exploitation

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

SmuggleShield
SmuggleShield
Open Source Exploitation

Protection against HTML smuggling attacks.

Snake_Apple
Snake_Apple
Open Source Exploitation Reverse Engineering

Articles and tools related to research in the Apple environment (mainly macOS).

SNEK_Blue-War-Hammer
SNEK_Blue-War-Hammer
Free Exploitation Post-Exploitation

Blue Hammer by Nightmare-Eclipse Vulnerability Documentation & Reimplementation.

Sni5Gect-5GNR-sniffing-and-exploitation
Sni5Gect-5GNR-sniffing-and-exploitation
Open Source Exploitation

A 5G Sniffer and Downlink Injector Framework on steroids... And yes, Wireshark supported!!!

snoop
snoop
Free Exploitation Reconnaissance

Snoop — инструмент разведки на основе открытых данных (OSINT world)

soar-php
soar-php
Open Source Exploitation

SQL optimizer and rewriter(assisted SQL tuning). - SQL 优化器和重写器(辅助 SQL 调优)。

sofa
sofa
Open Source Exploitation

SOFA | A MacAdmin's Simple Organized Feed for Apple Software Updates

sopa
sopa
Open Source Exploitation Post-Exploitation

A practical client for ADWS in Golang.

Spell-Whisperer
Spell-Whisperer
Open Source Exploitation

Spell whisperer is a prompt injection challenges platform based on Grok API.

spellbook
spellbook
Free Exploitation

Framework for rapid development of offensive security tools

sploitcraft
sploitcraft
Free Exploitation

🏴‍☠️ Hacking Guides, Demos and Proof-of-Concepts 🥷

Spoofy
Spoofy
Free Exploitation Social Engineering

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

spray
spray
Open Source Exploitation

最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.