47,133 repositories indexed
1–24 of 54 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods
Automated Penetration Testing Agentic Framework Powered by Large Language Models
John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs
CTF framework and exploit development library
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
The Browser Exploitation Framework Project
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An all-in-one hacking tool to remotely take over Android devices.
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A python script that finds endpoints in JavaScript files
A toolset to make a system look as if it was the victim of an APT attack
UFONet - Denial of Service Toolkit
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
XSS'OR - Hack with JavaScript.
Reflective PE packer.
A DNS rebinding attack framework.