47,133 repositories indexed
1–24 of 27 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Exploitation Framework for Embedded Devices
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
Creates up to a thousand WiFi access points with custom SSIDs.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.
Advanced keyboard-walk generator with configureable basechars, keymap and routes
High-Performance word generator with a per-position configureable charset
A front-end JavaScript toolkit for creating DNS rebinding attacks.
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
HAT (Hashcat Automation Tool) - An Automated Hashcat Tool for common wordlists and rules to speed up the process of cracking hashes during engagements. Created for Linux based systems
Create adversarial attacks against machine learning Windows malware detectors
Open-source agentic security operations platform:
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
NullKia Mobile Security Framework - Tools in Nim, Crystal, V, D, Red, Odin, Haxe, Zig, Kotlin, Lua, PHP, Python | bad-antics | github.com/bad-antics
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
Simple ELF runtime packer for creating self-protecting binaries
Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries