Exploitation
Arsenal of tools for ethical hacking and pentesting
Reverse Shell Generator
ExploitationOnline reverse shell generator for dozens of languages, with listeners and encoding.
SQLMap
ExploitationAutomatic SQL injection detection and exploitation tool. Essential for web audits.
Exploit-DB
ExploitationArchive of public exploits and vulnerable software. Maintained by Offensive Security.
BeEF
ExploitationBrowser Exploitation Framework. Focuses on web browser vulnerabilities.
XSStrike
ExploitationAdvanced XSS detection suite equipped with multiple parsers and payloads.
Metasploit Framework
ExploitationThe worlds most respected exploitation framework. Ideal for manual and automated pentesting.
Pwntools
ExploitationCTF framework and exploit development library. Ideal for binary exploitation.
Responder
ExploitationLLMNR, NBT-NS and MDNS poisoner. Captures credentials in Windows networks.
Kerbrute
ExploitationActive Directory user enumeration and password spraying via Kerberos pre-auth.
Ghauri
ExploitationAdvanced SQL injection detection and exploitation tool, a modern sqlmap alternative.
One-Lin3r
ExploitationLightweight framework with ready-to-use one-liner payloads for pentesting.
SearchSploit
ExploitationCommand-line tool for searching Exploit-DB offline.
Dalfox
ExploitationXSS scanner and parameter analyzer. Fast and powerful written in Go.
Commix
ExploitationAutomated tool to detect and exploit command injection vulnerabilities.
Ropper
ExploitationTool to find ROP gadgets in binaries. Essential for bypassing protections.