Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
📱 objection - runtime mobile exploration
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
- ai
- deep-reinforcement-learning
- wpa-psk
- handshakes
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
Weaponized web shell
UFONet - Denial of Service Toolkit
A tool to abuse Exchange services
Automated Red Team Infrastructure deployement using Docker
An information security preparedness tool to do adversarial simulation.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, and reporting.
- active-directory
- cloud-security
- defensive-validation
- fastapi
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Standalone password candidate generator using the PRINCE algorithm
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
Routopsy - Hacking Routers with Routers
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
Simple tool to extract the most common substrings from an input text. Built for password cracking.
- passwords
- cracking
- string-manipulation
- wordlist-generator
DEPRECATED, Nozzlr is a bruteforce framework, trully modular and script-friendly
Markov-chains for linguistically-correct password cracking
A tool to assist IoT developers in securing MQTT-based IoT deployments