A comprehensive database of exploits and vulnerabilities for researchers and professionals
Top penetration testing tools
Powerful, widely used tools for security assessments, red teaming and penetration testing. Ranked by community votes from the Hispion directory.
A collection of search queries that can reveal sensitive information, vulnerabilities, and exposed data indexed by Google. Free to access through Exploit-DB's Google Hacking Database.
A blog post about abusing exported functions and exposed DCOM interfaces for pass-thru command execution and lateral movement
Cheat sheet with common enumeration and attack methods for Windows Active Directory.
A comprehensive web application security testing solution that offers built-in vulnerability assessment and management, as well as integration options with popular software development tool…
A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities
A demonstration site for the Acunetix Web Vulnerability Scanner, featuring intentionally vulnerable PHP code to test web application security.
A demonstration site for the Acunetix Web Vulnerability Scanner, intentionally vulnerable to various web-based attacks.
Weekly security newsletter with advisories from major software vendors
AEM (Adobe Experience Manager) Hacker is a tool designed to help security researchers and penetration testers identify and exploit vulnerabilities in AEM-based systems.
A tool for scanning Adobe Experience Manager instances for potential security vulnerabilities
A framework for exploiting Android-based devices and applications
Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
API Security is a comprehensive solution that provides continuous discovery, vulnerability assessment, threat detection, compliance monitoring, dynamic testing, and remediation capabilities…
API security platform that combines discovery, testing, and monitoring capabilities to identify and protect against API vulnerabilities throughout the development lifecycle.
A free online tool that scans and fixes common security issues in WordPress websites.
AlienVault OSSIM provides an all-in-one security management solution with asset discovery, vulnerability assessment, and SIEM capabilities.
A GitHub App that monitors GitHub organizations or repositories for adherence to security best practices and detects policy violations.
A tool for generating permutations, alterations and mutations of subdomains and resolving them
Know a tool that belongs here?
Help the community — suggest a tool and our team will review it.