An exploration of a new method to abuse DCOM for remote payload execution and lateral movement.
Best Offensive Security Tools
Compare 291 Offensive Security tools — 289 free, 0 freemium and 2 paid options, ranked by the security community. Find the right offensive security tool for your team.
291 tools
A collection of search queries that can reveal sensitive information, vulnerabilities, and exposed data indexed by Google. Free to access through Exploit-DB's Google Hacking Database.
A guide to bypassing RFID card reader security mechanisms using specialized hardware
A blog post about abusing exported functions and exposed DCOM interfaces for pass-thru command execution and lateral movement
AEM (Adobe Experience Manager) Hacker is a tool designed to help security researchers and penetration testers identify and exploit vulnerabilities in AEM-based systems.
A framework for exploiting Android-based devices and applications
Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.
A simple file format fuzzer for Android that can fuzz multiple readers at once
A repository containing material for Android greybox fuzzing with AFL++ Frida mode
Interactive online malware sandbox for real-time analysis and threat intelligence
A VM for mobile application security testing, Android and iOS applications, with custom-made tools and scripts.
APT Simulator is a tool for simulating a compromised system on Windows.
A Python-based tool that automates searching for targets and exploiting vulnerabilities by combining Shodan and Metasploit to automatically select and deploy exploits.
Collection of penetration testing scripts for AWS with a focus on reconnaissance.
AzureC2Relay enhances security by validating and relaying Cobalt Strike beacon traffic through Azure Functions.
A post-exploitation framework for attacking running AWS infrastructure
A guide on basic Linux privilege escalation techniques including enumeration, data analysis, exploit customization, and trial and error.
BeEF is a specialized penetration testing tool for exploiting web browser vulnerabilities to assess security.
A lightweight and portable Docker container for penetration testers and CTF players
Comprehensive tutorial on modern exploitation techniques with a focus on understanding exploitation from scratch.
Boofuzz is a network protocol fuzzing tool that aims to fuzz everything
A penetration testing tool that focuses on web browser exploitation
Advanced command and control tool for red teaming and adversary simulation with extensive features and evasion capabilities.
A tool that visits suspected phishing pages, takes screenshots, and extracts interesting files.
Load more tools
Showing 24 of 291