Exploit Pack

Exploit Pack provides access to an internal exploit database maintained by the Exploit Pack research lab, containing more than 39,000 exploits and 0-days from our own lab. These exploits are categorized to support controlled exploitation during security assessments, offering broad coverage across platforms, services, and vulnerability types for testing and validation purposes.

Exploit Pack includes helpers for referencing known CVEs during exploitation work, allowing users to correlate exploit modules with public vulnerability identifiers. In addition, a built-in HTML penetration testing report generator enables structured documentation of exploitation results, supporting clear communication of findings and impact in assessment reports.

Deploy a helper application (Sidekick) on Windows. When connected to the Sidekick app, you can run your exploit on the target system and receive the output directly in Exploit Pack. The exploit can be debugged remotely using Ghidra or WinDBG with the Sidekick plugin. Instead of manually transferring files, running payloads, and collecting output, Sidekick acts as a bridge between your development environment and Exploit Pack.

A built-in exploit editor designed to support the creation, modification, and testing of exploit code within the framework. The editor provides a structured environment with syntax highlighting and direct integration with the module system, allowing users to edit exploits, manage metadata, and execute modules without leaving the platform. This integration helps streamline exploit development and iterative testing.

The framework provides integrated network scanning capabilities combined with AutoPwn-style workflows. Discovered services can be automatically matched against available exploit modules, enabling rapid transition from service identification to exploitation attempts. These workflows are designed to streamline repetitive tasks while still allowing manual control and validation at each stage.

Exploit Pack includes fuzzing tools for remote TCP services, local file-based targets, and socket-based communication. Supporting utilities such as pattern and offset generators help identify crash offsets during exploit development, while UTF locator tools assist in locating payloads within memory. Together, these features support both vulnerability discovery and exploit reliability testing.