It runs on Windows and Linux (Ubuntu/Kali) and is built entirely in Python, allowing for a completely open design that teams can adapt to their needs.

A standout feature is its ability to import results from popular vulnerability scanners like Qualys and Tenable , allowing testers to quickly validate whether a detected "vulnerability" is actually exploitable.

This pack is famous for its "DEP-defeating" chains, designed to bypass modern security mitigations like DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization).

It includes the D2 Elliot Web Exploitation Framework , which simplifies complex web attacks like SQL injection and RCE by providing dedicated Python classes for quick exploit development. The Heavy Hitter: WhitePhosphorus