A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
47,133 repositories indexed
25–48 of 60 · Most stars
A high performance offensive security tool for reconnaissance and vulnerability scanning
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
A tool to abuse Exchange services
Reverse Shell as a Service
Hashtopolis - distributed password cracking with Hashcat
A modular vulnerability scanner with automatic report generation capabilities.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
:key: Hash type identifier (CLI & lib)
Hacking Toolkit
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.
Fast HTTP enumerator
DNS Rebinding Exploitation Framework
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
Various wordlists FR & EN - Cracking French passwords
Hashcat web interface
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
:hammer: A multiple reverse shell session/client manager via terminal
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡