Repository Index

Automatic SQL injection and database takeover tool

• sql-injection
• detection
• exploitation
• python

World's fastest and most advanced password recovery utility

• hashcat
• password
• cracking
• gpgpu

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

• 0x4m4
• ai
• ai-agents
• ai-cybersecurity

Scapy: the Python-based interactive packet manipulation program & library.

• scapy
• python
• network
• network-analysis

Credentials recovery project

TranslatedOneForAll is a powerful subdomain collection tool

• subdomain
• subdomain-scanner
• subdomain-enumeration
• subdomain-bruteforcing

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

• ai
• ai-agents
• ai-cybersecurity
• ai-penetration-testing

A fast, simple, recursive content discovery tool written in Rust.

• web
• pentest
• pentesting-tool
• rust

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

An all-in-one hacking tool to remotely take over Android devices.

• adb
• android
• android-debug-bridge
• cybersecurity

HTTP parameter discovery suite.

• api-testing
• api-fuzzer
• api-fuzzing
• recon

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.

• automated-pentesting
• bruteforce
• cybersecurity
• e-paper

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

• exploit
• 0day
• poc
• getshell

Automated Αll-in-One OS command injection exploitation tool.

• python
• command-injection
• detection
• exploitation

Hashtopolis - distributed password cracking with Hashcat

• cracking
• distributed
• hashcat
• pentesting

passfab-unlocker: Standalone Offline Password Recovery Solution

• automation
• desktop
• developer-tools
• device-recovery

Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.

• ai-agents
• autonomous-agents
• kali-linux
• llm-agents

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

Bind/Reverse Shells, SOCKS, etc over Tor in Golang

• tor
• ethical-hacking
• reverse-shell
• bind-shell

Proof of concept denial of service over TOR stress test tool

passfab-unlocker: Offline Password Recovery Desktop Software with Full Feature Set

• automation
• desktop
• developer-tools
• device-recovery