Trending repositories

1.vxcontrol / pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

• ai-agents
• ai-security-tool
• autonomous-agents
• golang
• graphql
• multi-agent-system
• +12 more

2.promptfoo / promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops
• prompt-testing
• testing
• +12 more

3.irraz / vulnerator-ai

Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.

• ai-agents
• autonomous-agents
• kali-linux
• llm-agents
• offensive-security
• ooda-loop
• +3 more

4.0x4m4 / hexstrike-ai

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

• 0x4m4
• ai
• ai-agents
• ai-cybersecurity
• ai-hacking
• ai-penetration-testing
• +14 more

5.Z4nzu / hackingtool

ALL IN ONE Hacking Tool For Hackers

• allinonehackingtool
• web-attack
• password-attack
• hacking
• wireless-attack
• besthackingtool
• +7 more

6.zgsfsec / Full-Chain-Sentinel-System

Translated全链哨兵 (Quanlian Shaobing, "full-chain sentinel") is a cybersecurity Agent that integrates Web penetration testing, Android App security testing, iOS APP security toilet, batch targeting for attack and defense, automated emergency response, and open-source vulnerability monitoring. It is used to assist with automating security service delivery. Use for illegal purposes is prohibited.

• agent
• blue-team
• cybersecurity
• cybersecurity-tools
• pentest-tool
• pentest-tools
• +4 more

7.danielmiessler / SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

8.GreyDGL / PentestGPT

Automated Penetration Testing Agentic Framework Powered by Large Language Models

• penetration-testing
• python
• large-language-models
• llm

9.dbx0 / executioner

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

• ai-agents
• bug-bounty
• electron
• offensive-security
• pentesting
• recon
• +4 more

10.MatrixTM / MHDDoS

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 60 Methods

• ddos
• ddos-attacks
• ddos-tool
• attack
• cloudflare-bypass
• layer4
• +13 more

11.ffuf / ffuf

Fast web fuzzer written in Go

• fuzzer
• pentesting
• infosec
• web

12.bee-san / Ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

• decryption
• natural-language-processing
• cryptography
• cipher
• artificial-intelligence
• ctf-tools
• +11 more

13.redcanaryco / atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

• mitre
• mitre-attack

14.Manisso / fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

• fsociety
• exploitation
• port-scanning
• fsociety-hacking
• post-exploitation
• web-hacking
• +7 more

15.shadow1ng / fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

• fscan
• scanner
• scanning
• sec
• security-tools
• security

16.Ullaakut / cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

• penetration-testing
• security
• hacking
• infosec
• rtsp
• cctv
• +5 more

17.RsaCtfTool / RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

• rsa-attack
• rsa
• cryptography

18.SpacehuhnTech / WiFiDuck

Wireless keystroke injection attack platform

• esp8266
• arduino
• hid
• hacktoberfest

19.thomasunise / argus

Open-source agentic security operations platform:

• agentic-ai
• agentic-security
• agentic-workflow
• cyber-security
• cyber-threat-intelligence
• cybersecurity
• +8 more

20.dstotijn / hetty

An HTTP toolkit for security research.

• mitm
• proxy
• http
• pentesting
• infosec
• bugbounty

21.NextronSystems / APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

22.spacehuhn / esp8266_beaconSpam

Creates up to a thousand WiFi access points with custom SSIDs.

• ssid
• custom-ssids
• wifi
• esp8266
• spam
• flood
• +1 more

23.ZerBea / hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

• wlan
• wpa
• wpa2
• raspberry-pi
• hashcat
• handshake
• +8 more

24.mufeedvh / pdfrip

A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.

• rust
• security
• security-tools
• pdf
• password
• password-cracker
• +1 more

25.noraj / haiti

:key: Hash type identifier (CLI & lib)

• security-tools
• hash
• identify
• digest
• hashing
• security
• +14 more

26.goshs-labs / goshs

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

• golang
• http-server
• https-server
• ctf
• devtools
• file-transfer
• +14 more

27.assetnote / h3fuzz

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

28.pry0cc / axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

• hacking-vps
• bug-bounty
• tmux
• axiom
• masscan
• gowitness
• +12 more

29.lukechilds / reverse-shell

Reverse Shell as a Service

• reverse-shell
• exploit
• vulnerability
• pentesting
• microservice
• security

30.nccgroup / singularity

A DNS rebinding attack framework.

• dns-rebinding
• dns
• vulnerability
• attack
• iot

31.mgeeky / ProtectMyTooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

32.GerbenJavado / LinkFinder

A python script that finds endpoints in JavaScript files

• infosec
• endpoints

33.TryCatchHCF / DumpsterFire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• pentesting
• hacking
• hacking-tool
• pentest-tool
• automation
• security
• +9 more

34.gsmith257-cyber / GraphCrawlerArchived

GraphQL automated security testing toolkit

• api
• automated-testing
• cybersecurity
• graphql
• graphql-api
• pentesting
• +2 more

35.NotSoSecure / password_cracking_rules

One rule to crack all passwords. or atleast we hope so.

36.jordanpotti / AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets

• s3-bucket
• penetration-testing
• bugbounty
• enumeration

37.brannondorsey / naive-hashcat

Crack password hashes without the fuss :cat2:

• password-cracking
• hashcat
• hash-cracking
• hacking

38.Aegrah / PANIX

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

• bash
• linux
• persistence
• backdoor
• security

39.whad-team / whad-client

Wireless Hacking Devices Protocol client