68,261 visible repositories in the index
49–72 of 105 · Most stars
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
Rust Weaponization for Red Team Engagements.
DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic
The Official Bash Bunny Payload Repository
PPPwn - PlayStation 4 PPPoE RCE
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
A collection of Azure AD/Entra tools for offensive and defensive security purposes
Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)
💤 Kick devices off your network by performing an ARP Spoof attack.
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
CTF challenge (mostly pwn) files, scripts etc
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
各种漏洞poc、Exp的收集或编写
Conference presentation slides
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
Offline FairPlay App Store IPA decryption with independent key derivation
A tool for analyzing the size of compiled Go binaries, offering cross-platform support, detailed breakdowns, and multiple output formats.
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
The Offensive Manual Web Application Penetration Testing Framework.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
Automated Red Team Infrastructure deployement using Docker
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.