⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips
- pentesting
- pentesting-tools
- pentesting-windows
- security
88,573 visible repositories in the index
385–408 of 1,752 · Most stars
⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。
A `.git` folder disclosure exploit
Open-source AI-powered offensive security harness for automated penetration testing.
Laravel Eloquent roles and abilities.
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
a Python API for your car
Google Sign-in for your React Native applications
Nmap NSE scripts that turn a service scan into CVEs, CVSS scores and known exploits — fingerprints software from HTTP responses and checks every detected CPE against the Vulners database.
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Collaborative forensic timeline analysis
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
👻Stowaway -- Multi-hop Proxy Tool for pentesters
Network Analysis Tool
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Platform-Agnostic Security Tokens
Tool to look for several security related Android application vulnerabilities