SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
65,764 visible repositories in the index
1–24 of 41 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- penetration-testing
- pentesting
- security-audit
- security-automation
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
- phishing
- phisher
- phishing-attacks
- htr-tech
Affordable WiFi hacking platform for testing and learning
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
The ESP32-BlueJammer (Bluetooth jammer, BLE jammer, WiFi jammer, RC jammer) disrupts 2.4GHz communications. Using an ESP32 and nRF24 modules, it generates noise and unnecessary packets, causing interference between the devices communicating, making them unable to work as intended. Ideal for controlled disruption and security testing.
- bluetooth
- bt
- coding
- cybersecurity
You Know, For WEB Fuzzing !
- fuzzing
- fuzz-testing
- pentesting
- username
This is a multi-use bash script for Linux systems to audit wireless networks.
- evil-twin
- wps
- security
- beef
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.
- badusb
- badusb-payloads
- flipper-zero
- flipperzero
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
- waf
- fingerprint
- waffit
- web-application-firewall
The Official USB Rubber Ducky Payload Repository
- badusb
- ducky-payloads
- duckyscript
- hak5
Modlishka. Reverse Proxy.
- penetration-testing-tools
- mitm
- reverse-proxy
- security-tools
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
Phishing Tool & Information Collector
- phishing
- python
- pentesting
- undead
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
A tool to dump the login password from the current linux user
- post-exploitation
- password-extraction
Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
AdaptixC2 is a highly modular advanced redteam toolkit
Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
- regeorg
- neoreg
- reduh
- socks-proxy
Create a USB Rubber Ducky like device using a Raspberry PI Pico
Wireless keystroke injection attack platform
Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.
- phishing
- tool
- socialengineering
- social-engineering