PhoneSploit — A tool for remote ADB exploitation in Python3 for all Machines.

octoscan — Octoscan is a static vulnerability scanner for GitHub action workflows.

php2shell-poc — CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

StegoForge — The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run 11 advanced detection engines to uncover hidden payloads.

linux-exploit-suggester — Linux privilege escalation auditing tool

awesome-hacker-search-engines — A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more