EONRaider / RootWire

RootWire: A network traffic monitor for GNU/Linux — Live Capture, PCAP Replay, NDJSON Output. Formerly Packet-Sniffer.

SudoHopeX / KaliGPT

KaliGPT: an Agentic AI (built with Gemini, ChatGPT, Ollama, OpenRouter Models) fine tuned for ethical hackers & students in offensive security making workflows smarter, faster, and more accessible.

saifalisew1508 / Telegram-Members-Adder

Telegram Members Adding Software/Script Using Termux.

borski / travel-hacking-toolkit

AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.

OWASP / OFFAT

The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towards completion.

BullsEye0 / ghost_eye

Ghost Eye Informationgathering Footprinting Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff

dmdhrumilmistry / pyhtools

A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.

Frissi0n / GTFONow

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

pablosnt / rekono

Offensive security platform that automates attack surface discovery and vulnerability management

watsondonald14 / mflowgen

mflowgen

The-Art-of-Hacking / websploit

This is a learning created by Omar Santos (@santosomar) for different Cybersecurity training sessions. It includes many intentionally vulnerable applications running in Docker containers and thousands of cybersecurity resources.

morpheuslord / GPT_Vuln-analyzer

Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent

AdnaneKhan / gato-x

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

ImKKingshuk / LockKnife

LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.

AISecurityLab / hackagent

HackAgent is an open-source security toolkit to detect vulnerabilities of your AI Agents

mubix / cyber-resume-reviewer-skill

A skill to help cybersecurity folks update and tweak their resume

KorekKayu / IKONA-Security

🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI

PolarPatch / BlueWatch

Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.

shaheeryasirofficial / SmuggleMyPayload

SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.

kulchankas / paranoid

Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request, patches it, and re-verifies. Claude Code · Codex · Cursor.

Tangruwo / RuwoScan

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

shaheeryasirofficial / ClickMyPayload

ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load

sarahmoorec52 / Pragmata-Assistant

Ultimate assistant for Pragmata. Features: God Mode/Ignore Hits, Infinite Health, Edit Max Health, Infinite Thrust, Infinite Ammo, Max Hacking Gauge, Unlimited Repair Cartridge, and more. 27+ functions.

irsdl / webhacklist

Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved

opsdisk / pagodo

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching