Free
Windows Oneliners for Remote Code Execution
A week-long series of articles and talks on evading Microsoft Advanced Threat Analytics (ATA) detection
Offensive Security
Offensive security testing uncovers vulnerabilities through simulated attacks.
Try these 279 AI Offensive Security Tools
Free
WordPress Exploit Framework
An open-source intelligence collection, research, and artifact management tool inspired by SpiderFoot, Harpoon, and DataSploit.
Free
WPSploit
A suite of tools for Wi-Fi network security assessment and penetration testing.
Free
WS-Attacker
A cheat sheet providing examples of creating reverse shells for penetration testing.
Free
XAHICO Platform
A customized Kali Linux distribution for ICS/SCADA pentesting professionals
Free
x8
BeEF is a specialized penetration testing tool for exploiting web browser vulnerabilities to assess security.
Free
xargs
Adversary emulation framework for testing security measures in network environments.
Free
XlsGen
GNU/Linux Wireless distribution for security testing with XFCE desktop environment.
Free
XSpear
A tool to remove malicious artifacts from Microsoft Office documents, preventing malware infections and data breaches.
Free
XSSOauthPersistence
A managed code hooking template for .NET assemblies, enabling API hooking, code injection, and runtime manipulation.
Free
Yara4Pentesters
A front-end JavaScript toolkit for creating DNS rebinding attacks
Free
YARI
A cheat sheet providing examples of creating reverse shells for penetration testing.
E
Free
EasyHunting View EasyHunting
A professional platform that simplifies penetration testing by providing a unified dashboard for managing targets, automating scans, integrating diverse tools, and delivering AI-powered insights.
Free
Metasploit View Metasploit
Metasploit is the industry-leading open-source penetration testing platform, empowering security professionals to discover, exploit, and validate vulnerabilities with precision and efficiency. Its comprehensive framework provides a robust environment for developing and executing exploit code, managing security assessments, and enhancing defensive strategies through IDS signature development and anti-forensic techniques. Trusted globally, Metasploit accelerates your security testing lifecycle and strengthens your organization's defenses against emerging threats.
Extensive exploit module library
Vulnerability scanning and validation
Payload generation and management