Z4nzu / hackingtool
ALL IN ONE Hacking Tool For Hackers
Z4nzu / hackingtool
usestrix / strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
MatrixTM / MHDDoS
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
Datalux / Osintgram
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
maurosoria / dirsearch
Web path scanner
OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
pwndbg / pwndbg
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
bee-san / pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
BitterSecurity / Decepticon
Autonomous Hacking Agent for Red Team
Pennyw0rth / NetExec
The Network Execution Tool
OWASP / Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
kaifcodec / user-scanner
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
awarexone / Agentic-Bug-Hunter
AI-powered bug bounty hunting toolkit that works with or without subscription.
elementalsouls / Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
DedSecInside / TorBot
Dark Web OSINT Tool
arxhr007 / Aliens_eye
AI powered OSINT engine to discover and map 840+ social media identities across the web
jekil / awesome-hacking
Awesome hacking is an awesome collection of hacking tools.
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
gwen001 / pentest-tools
A collection of custom security tools for quick needs.
GH05TCREW / pentestagent
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
ThePorgs / Exegol
Fully featured and community-driven hacking environment
Alfredredbird / tookie-osint
Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.
jayofelony / pwnagotchi
(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.
osintbrazuca / osint-brazuca
Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.
TermuxHackz / X-osint
This is an Open source intelligent framework ie an osint tool which gathers valid information about a phone number, user's email address, perform VIN Osint, and reverse, perform subdomain enumeration, able to find email from a name, and so much more. Best osint tool for Termux and linux
tsingyuai / growth-lab
An end-to-end growth tool that understands the product, fetch the data it needs, researches the market, executes campaigns, and reviews results to improve the next round of growth. 从代码到市场的开源端到端增长工具。理解产品、接入信息渠道、研究市场、执行增长行动，并基于真实数据自我改进。
wgpsec / AboutSecurity
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。
0xSteph / pentest-ai
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
Hacking-Notes / Hacker-Roadmap
A detailed plan to achieve proficiency in hacking and penetration testing, with pathways including obtaining a degree in cybersecurity or earning relevant certifications.
freelabz / secator
secator - the pentester's swiss knife
topscoder / nuclei-wordfence-cve
80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
wilbowes / EchoMuse
Alexa replacement and controller for Echo Dot 2nd Generation device.
ipa-lab / hackingBuddyGPT
Helping Ethical Hackers use LLMs in 50 Lines of Code or less..
yashab-cyber / hackpilot
HackPilot Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices architecture, and comprehensive security frameworks to deliver professional-grade cybersecurity assessments.
blackhillsinfosec / WifiForge
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.
jamesyc / TimeCapsuleSMB
Hacking the Apple AirPort Time Capsule to run modern Samba
GamehunterKaan / AutoPWN-Suite
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
laluka / bypass-url-parser
bypass-url-parser
berylliumsec / nebula
Cybersecurity Harness
AKCodez / hackingtool-plugin
Claude Code plugin: 183+ pentesting & OSINT tools from Z4nzu/hackingtool. Auto-runs what it can, hands off the rest.
chAng-L19 / codex-redteam-mode
针对于红队攻击思维做出的red team模式(破限项目，封号概不负责）##可自行适配其他Agent。项目问题请提issue
Zarcolio / sitedorks
Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.
kennbroorg / iKy
OSINT Project. Collect information from a mail. Gather. Profile. Timeline.
frangelbarrera / OSINT-BIBLE
Comprehensive 2026 OSINT guide — 450+ tools, AI intelligence, methodologies & ethics across 35 sections for investigation & threat intel.
FLOCK4H / Freeway
WiFi Penetration Testing & Auditing Tool
BullsEye0 / dorks-eye
Dorks Eye Google Hacking Dork Scraping and Searching Script. Dorks Eye is a script I made in python 3. With this tool, you can easily find Google Dorks. Dork Eye collects potentially vulnerable web pages and applications on the Internet or other awesome info that is picked up by Google's search bots. Author: Jolanda de Koff
dedsec1121fk / DedSec
Official repository of the DedSec Project.
irsdl / webhacklist
Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved
prbhtkumr / PhoneSploit
A tool for remote ADB exploitation in Python3 for all Machines.
vil / H4X-Tools
A modular, terminal-based toolkit for OSINT, reconnaissance, and scraping - built in Python, runs on Linux and Windows.
EvolvingLMMs-Lab / lmms-engine
A simple, unified multimodal models training engine. Lean, flexible, and built for hacking at scale.
zinja-coder / jadx-mcp-server
MCP server for JADX-AI Plugin
EONRaider / RootWire
RootWire: A network traffic monitor for GNU/Linux — Live Capture, PCAP Replay, NDJSON Output. Formerly Packet-Sniffer.
SudoHopeX / KaliGPT
KaliGPT: an Agentic AI (built with Gemini, ChatGPT, Ollama, OpenRouter Models) fine tuned for ethical hackers & students in offensive security making workflows smarter, faster, and more accessible.
saifalisew1508 / Telegram-Members-Adder
Telegram Members Adding Software/Script Using Termux.
borski / travel-hacking-toolkit
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.