70,234 visible repositories in the index
1–24 of 75 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
The Browser Exploitation Framework Project
This is a multi-use bash script for Linux systems to audit wireless networks.
Scripted Local Linux Enumeration & Privilege Escalation Checks
Cyber Security ALL-IN-ONE Platform
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
The all-in-one browser extension for offensive security professionals 🛠
autonomous red teaming platform; multi-agent offensive-security meta-harness
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An all-in-one hacking tool to remotely take over Android devices.
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
The Official USB Rubber Ducky Payload Repository
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A collaborative, multi-platform, red teaming framework
Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)
TranslatedAntSword is a cross-platform website management toolkit.
A python script that finds endpoints in JavaScript files
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
Privilege Escalation Enumeration Script for Windows