47,133 repositories indexed
1–24 of 61 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
Web path scanner
Directory/File, DNS and VHost busting tool written in Go
CTF framework and exploit development library
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Exploitation Framework for Embedded Devices
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Infection Monkey - An open-source adversary emulation platform
Common User Passwords Profiler (CUPP)
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The Leading Security Assessment Framework for Android.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
Automated NoSQL database enumeration and web application exploitation tool.
UFONet - Denial of Service Toolkit
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
XSS'OR - Hack with JavaScript.
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
pwning IPv4 via IPv6
Hashtopolis - distributed password cracking with Hashcat
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.