71,372 visible repositories in the index
1–24 of 44 · Most stars
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
The ZAP by Checkmarx Core project
Most advanced XSS scanner.
Web path scanner
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Exploitation Framework for Embedded Devices
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
The recursive internet scanner for hackers. 🧡
TranslatedOneForAll is a powerful subdomain collection tool
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Cyber Security ALL-IN-ONE Platform
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
Automated Αll-in-One OS command injection exploitation tool.
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange
w3af: web application attack and audit framework, the open source web vulnerability scanner.
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
A Security Tool for Bug Bounty, Pentest and Red Teaming.
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
TranslatedKscan is an all-round scanner developed purely in Go, with features such as port scanning, protocol detection, fingerprint recognition, and brute-force cracking. It supports 1,200+ protocols, 10,000+ protocol fingerprints, 20,000+ application fingerprints, and more than 10 brute-force cracking protocols.