Exploit Development
Exploit Development groups the cybersecurity tools focused on exploit development, pulled from across every category so you can compare every option in one place. Filter by category or pricing to narrow the field. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
Browse 27 cybersecurity solutions, with 0 security professionals searching monthly
FEATURED
Public benchmark of Cipher AI pentesting agent vs. 104 XBOW challenges.
AI-driven pentest suite: Cipher tests live apps, Niro secures PRs in CI/CD.
Autonomous AI black-box pentesting platform with exploit chaining and PoC generation.
Autonomous offensive security platform that finds, validates, and remediates attack paths.
AI-driven continuous penetration testing platform with automated remediation.
Public database of vulnerabilities and CVEs discovered by NebuSec's research team
AI agent that finds, exploits & verifies zero-day vulns with zero false positives.
AI-powered CVE intelligence platform with exploit data, EPSS, and ATT&CK mappings.
Hands-on red team training platform with labs, cyber ranges, and CTF assessments.
AI agent platform for automating offensive security operations and evals.
Training course for Android and iOS mobile app security testing and exploitation
MCP server enabling AI agents to autonomously run 150+ security tools
AI-powered automated penetration testing platform for vulnerability discovery
A framework for testing and exploiting race condition vulnerabilities through concurrent request analysis and timing attack automation.
A collection of Return-Oriented Programming (ROP) challenges designed for practicing binary exploitation techniques and developing offensive security skills.
Ropper is a multi-architecture binary analysis tool that searches for ROP gadgets and displays information about executable files for exploit development.
Pwndbg is a GDB plug-in that enhances the debugging experience for low-level software developers, hardware hackers, reverse-engineers, and exploit developers.
PEDA is a Python extension for GDB that enhances debugging with colorized displays and specialized commands for exploit development and binary security analysis.
A set of commands for exploit developers and reverse-engineers to enhance GDB functionality.
A Python library that simplifies format string vulnerability exploitation by providing tools for payload generation, memory manipulation, and automated parameter detection.
A Windows kernel driver intentionally designed with various vulnerabilities to help security researchers practice kernel exploitation techniques.
OneGadget is a CTF-focused tool that uses symbolic execution to find RCE gadgets in binaries that can execute shell commands through execve('/bin/sh', NULL, NULL).
