SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
75,360 visible repositories in the index
1–24 of 24 · Most stars
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
This is a multi-use bash script for Linux systems to audit wireless networks.
- evil-twin
- wps
- security
- beef
autonomous red teaming platform; multi-agent offensive-security meta-harness
- agents
- ai
- multi-agent
- offensive-security
A collaborative, multi-platform, red teaming framework
Open-source AI red teaming toolkit from Microsoft. Test generative AI systems with automated scans, adaptive multi-turn attacks, and a web UI.
- ai-red-team
- generative-ai
- red-team-tools
- responsible-ai
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
- open-source
- pentest
- pentesting
- readteaming
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
- pentest
- brute-force
👻Stowaway -- Multi-hop Proxy Tool for pentesters
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
- crack
- zip
- multithread
- attack
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
- oscp
- penetration-testing
- scanner
- security
The first fruit of the Nüwa tree — an autonomous AI pentest legion (634-team champion, 8h unattended, 1B tokens beat 4.5B). Not just a tool: evolvable by design. Grow your own fruit on the Nüwa Foundation (Create/Language/History).
ESP32-DIV HaleHound Edition for Cheap Yellow Display - Multi-protocol offensive security toolkit
- bluetooth
- cc1101
- cheap-yellow-display
- cyd
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
- rust
- security
- security-tools
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
Multi-provider OTP spam tool
tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
- a12-bypass
- activator
- bypassing
- checkm8
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat
- cybersecurity
- hashcat
- hashcat-rules
- johntheripper