SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
55,140 visible repositories in the index
1–21 of 21 · Most stars
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
- ai-agents
- ai-security-tool
- autonomous-agents
- golang
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
- llm
- prompt-engineering
- prompts
- llmops
People tracker on the Internet: OSINT analysis and research tool by Jose Pino
- tracking
- osint
- footprint
- hacking-tool
A fast, simple, recursive content discovery tool written in Rust.
- web
- pentest
- pentesting-tool
- rust
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
- penetration-testing
- red-teaming
- windows
- fireeye-flare
The all-in-one browser extension for offensive security professionals 🛠
- reverse-shell
- hacking
- hack-tools
- chrome-extension
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
- python
- attack
- adversarial-machine-learning
- poisoning
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Automated Attack Simulation in the Cloud, complete with detection use cases.
dll injection tool that implements various methods
Rule for hashcat or john. Aiming to crack how people generate their password
- hashcat
- hashcat-rules
- john
- john-rules
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
macOS persistence tool
- persistence
- macos
TranslatedPassword generation tool: flexible and scriptable password dictionary generator which can support brute-force, combination, complex rule mode etc...
- password-generator
- password-dictionaries
- wordlist-generator
- brute-force
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
- audit
- cognito
- cybersecurity
- scanner
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.
Simple tool to extract the most common substrings from an input text. Built for password cracking.
- passwords
- cracking
- string-manipulation
- wordlist-generator
Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat
- cybersecurity
- hashcat
- hashcat-rules
- johntheripper
Simple ELF runtime packer for creating self-protecting binaries
Attack tool for altering packed samples so that they evade static packing detection
- adversarial
- attack-defense
- evasion
- executable-packing