The Toolkit
Exploitation Tools
This is the category where recon and analysis become access. Exploitation tools take a vulnerability you’ve found and weaponize it: launching an exploit, delivering a payload, and — when it lands — giving you a session on the target. The centerpiece is Metasploit, the framework that has defined this space for two decades, surrounded by tools for router exploitation, browser attacks, team collaboration, and searching the world’s public exploit archive.
Everything here is powerful and pointed only at systems you’re authorized to test.
| Tool | Source | What it’s for |
|---|---|---|
| metasploit | official | The exploitation framework — exploits, payloads, and post-exploitation, unified. |
| routersploit | AUR | A Metasploit-style framework aimed at routers and embedded devices. |
| armitage | AUR | A graphical front end and team console for Metasploit. |
| beef | AUR | The Browser Exploitation Framework — hook and control web browsers. |
| searchsploit | official | Offline command-line search over the Exploit-DB archive. |
All live under Security → Exploitation Tools. BeEF is also a toggleable service — see Running Services.