Automated Penetration Testing Agentic Framework Powered by Large Language Models
Repository Index
81,588 visible repositories in the index
1–24 of 60 · Most stars
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
- information-gathering
- osint
- osint-tools
- open-source-intelligence
CTF framework and exploit development library
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
Reverse Engineering: Decompiling Binary Code with Large Language Models
- decompile
- reverse-engineering
- large-language-models
- binary
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- automated-pentesting
- bruteforce
- cybersecurity
- e-paper
The Ultimate Information Gathering Toolkit
- cms-detection
- directory-finder
- dns-lookup
- information-gathering
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Automatic SSRF fuzzer and exploitation tool
- ssrf
- server-side-request-forgery
- exploitation
- vulnerability
Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
- regeorg
- neoreg
- reduh
- socks-proxy
Fully featured and community-driven hacking environment
DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic
- ddos-attacks
- ddos-tool
- ddos-attack-tools
- ddos-protection
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
- keylogger
- keylogging
- keylogger-screenshot
- keylog
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
- osint
- python
- recon
- framework
A OSINT tool to obtain a target's phone number just by having his email address
Open-source trust layer for AI agents — cryptographic agent identity (Ed25519), instance-scoped execution tokens, SHA-256 hash-chained audit logging, and enterprise SSO/SCIM federation. The security foundation powering every agent in the Metaprise AURA platform.
Phishing Campaign Toolkit
- king-phisher
- python
- phishing
- security
A Python program to scrape secrets from GitHub through usage of a large repository of dorks.
MUCH Improved version of the Python Chasing Your Tail Tool to help you determine if you're being followed
SSRF (Server Side Request Forgery) testing resources
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.
A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection