54,141 visible repositories in the index
1–24 of 56 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Metasploit Framework
Automatic SQL injection and database takeover tool
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Most advanced XSS scanner.
The Rogue Access Point Framework
CTF framework and exploit development library
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
The Browser Exploitation Framework Project
An open-source post-exploitation framework for students, researchers and developers.
📱 objection - runtime mobile exploration
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
The ESP32-BlueJammer (Bluetooth jammer, BLE jammer, WiFi jammer, RC jammer) disrupts 2.4GHz communications. Using an ESP32 and nRF24 modules, it generates noise and unnecessary packets, causing interference between the devices communicating, making them unable to work as intended. Ideal for controlled disruption and security testing.
Cyber Security ALL-IN-ONE Platform
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
The all-in-one browser extension for offensive security professionals 🛠
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
Autonomous Hacking Agent for Red Team
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An all-in-one hacking tool to remotely take over Android devices.
PEDA - Python Exploit Development Assistance for GDB
Automated Αll-in-One OS command injection exploitation tool.