SSTI Payload Generator
8 template engines: Jinja2, Twig, Freemarker, Velocity, Mako, ERB, Smarty, Pebble Automatic engine detection Multiple RCE payloads per engine with WAF bypass va
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
WPA2 Handshake Capturer
Network scanning and enumeration PMKID clientless attack (no deauth needed) Deauth + handshake capture pipeline Aircrack-ng and hashcat cracking Full automated
Evil Twin AP Framework Module
Target network scanning and cloning Hostapd + dnsmasq automated setup Responsive captive portal with credential harvesting DNS redirect all traffic to portal JS
Bluetooth Low Energy Scanner
BLE device discovery with hcitool Service and characteristic enumeration via gatttool Known service identification (Mi Band, Tile, COVID, etc.) Vulnerability de
WiFi Deauth Detector & Alert
Real-time monitoring of deauth/disassoc frames Configurable threshold and time window alerts Evil Twin / DoS attack detection JSON export for incident response
PMKID Attack Automator
No handshake needed — captures PMKID from AP directly hcxdumptool + hcxpcapngtool + hashcat pipeline Targeted or broadcast capture modes Automatic hash extracti
RF Signal Analyzer for SDR
RTL-SDR and HackRF support Signal capture, power spectrum analysis, peak detection Frequency band scanning with known-frequency identification Signal replay (Ha
Wireless IDS Evasion Techniques
MAC randomization with vendor OUI preservation Timed MAC rotation for temporal decorrelation Channel hopping to avoid single-channel monitors TX power reduction
Kismet Plugin: Corporate WiFi Mapper
Network discovery via Kismet REST API Rogue AP detection (SSID spoofing, unusual channels, signal anomalies) Client-to-AP association mapping WPA handshake capt
WPA Enterprise Credential Harvester
Auto-generates fake CA + server certificates hostapd-mana configuration for PEAP/MSCHAPv2 capture DHCP server for client connectivity Real-time credential monit
Process Hollowing Injector (C)
C source for process hollowing (RunPE): NtUnmapViewOfSection + PEB image-base fix-up + RWX to RX. Prebuilt x86/x64 demo binaries included.
Reflective DLL Injection Template
Position-independent reflective loader (PEB walk, relocations, imports) with injector harness. Prebuilt x86/x64 binaries. No disk, no LoadLibrary.