47,133 repositories indexed
1–24 of 36 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
The ZAP by Checkmarx Core project
Most advanced XSS scanner.
Affordable WiFi hacking platform for testing and learning
Web path scanner
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
Exploitation Framework for Embedded Devices
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
fsociety Hacking Tools Pack – A Penetration Testing Framework
This is a webshell open source project
Automated Αll-in-One OS command injection exploitation tool.
w3af: web application attack and audit framework, the open source web vulnerability scanner.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
Weaponized web shell
Automated NoSQL database enumeration and web application exploitation tool.
The Offensive Manual Web Application Penetration Testing Framework.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Remote Desktop Protocol in Twisted Python
Crack password hashes without the fuss :cat2:
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.