Automated Penetration Testing Agentic Framework Powered by Large Language Models
Repository Index
47,133 repositories indexed
1–24 of 179 · Most stars
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
- security
- security-tools
- security-audit
- security-hardening
The Rogue Access Point Framework
- wifiphisher
- wifi
- rogue
- access-point
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
- malware
- malware-analysis
- malware-samples
- malware-research
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Main Sigma Rule Repository
📱 objection - runtime mobile exploration
A powerful and user-friendly binary analysis platform!
- binary
- analysis
- angr
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
- python
- cryptography
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
GRR Rapid Response: remote live forensics for incident response
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
- bro
- scans
- nmap
- network
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
Weaponized web shell