sqlmap by sqlmapproject

Automatic SQL injection and database takeover tool

created at June 26, 2012, 9:52 a.m.

1,089 +1

30,634 +57

5,538 +2

CTFd by CTFd

CTFs as you need them

created at Jan. 1, 2015, 5:36 a.m.

114 +0

5,327 +12

1,964 +4

pwntools by Gallopsled

CTF framework and exploit development library

created at April 29, 2013, 2:43 p.m.

292 +0

11,505 +22

1,660 +2

binwalk by ReFirmLabs

Firmware Analysis Tool

created at Nov. 15, 2013, 8:45 p.m.

369 +0

10,182 +18

1,471 -1

volatility by volatilityfoundation

An advanced memory forensics framework

created at April 24, 2014, 3:45 p.m.

308 +0

6,939 +8

1,250 +1

w3af by andresriancho

w3af: web application attack and audit framework, the open source web vulnerability scanner.

created at Aug. 31, 2011, 11:20 p.m.

193 +0

4,451 +0

1,208 +0

androguard by androguard

Reverse engineering and pentesting for Android applications

created at Sept. 12, 2014, 8:48 a.m.

240 +0

4,953 +8

1,043 -1

angr by angr

A powerful and user-friendly binary analysis platform!

created at Aug. 6, 2015, 9:46 p.m.

185 +0

7,226 +12

1,037 +1

RsaCtfTool by RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

created at March 7, 2015, 5:29 p.m.

67 +0

5,268 +11

890 +4

pwndbg by pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

created at Feb. 22, 2015, 9:35 p.m.

139 +0

6,755 +28

837 +2

objection by sensepost

📱 objection - runtime mobile exploration

created at June 29, 2017, 11:21 a.m.

159 +0

7,016 +18

810 +1

commix by commixproject

Automated All-in-One OS Command Injection Exploitation Tool.

created at March 20, 2015, 8:38 a.m.

161 +0

4,340 +5

797 +0

peda by longld

PEDA - Python Exploit Development Assistance for GDB

created at Aug. 3, 2012, 6:26 a.m.

206 +0

5,752 +2

789 +0

patator by lanjelot

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

created at Aug. 25, 2014, 12:56 a.m.

149 +0

3,471 +3

774 +0

gef by hugsy

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

created at March 26, 2015, 10:25 p.m.

134 +0

6,499 +8

707 +3

ROPgadget by JonathanSalwan

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

created at Aug. 19, 2011, 3:30 p.m.

121 +1

3,731 +8

542 +0

uncompyle by gstarnberger

Python decompiler

created at Sept. 27, 2010, 8:46 p.m.

34 +0

420 +0

396 +0

Raccoon by evyatarmeged

A high performance offensive security tool for reconnaissance and vulnerability scanning

created at May 13, 2018, 5:05 p.m.

109 +0

3,006 +1

389 +1

SecGen by cliffe

Create randomly insecure VMs

created at Jan. 29, 2015, 4:33 p.m.

111 +0

2,577 +2

315 +0

RootTheBox by moloch--

A Game of Hackers (CTF Scoreboard & Game Manager)

created at March 11, 2012, 6:30 a.m.

50 +0

874 -1

287 +0