rawfilejson / awesome-osint-arsenal
OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.
rawfilejson / awesome-osint-arsenal
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
google / oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
testssl / testssl.sh
Testing TLS/SSL encryption anywhere on any port
six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
v1s1t0r1sh3r3 / airgeddon
This is a multi-use bash script for Linux systems to audit wireless networks.
bats-core / bats-core
Bash Automated Testing System
leebaird / discover
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
e-m-b-a / emba
EMBA - The firmware security analyzer
BlackArch / blackarch
An ArchLinux based distribution for penetration testers and security researchers.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
openstack / devstack
System for quickly installing an OpenStack cloud from upstream git for testing and development. Mirror of code maintained at opendev.org.
webdevops / Dockerfile
:package: Dockerfiles from WebDevOps for PHP, Apache and Nginx
Athena-OS / athena
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
lord-alfred / ipranges
🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.
GhostTroops / TOP
TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
enomothem / Whoamifuck
用于Linux应急响应，快速排查异常用户登录情况和入侵信息排查，准确定位溯源时间线，高效辅助还原攻击链。
appium / appium-docker-android
Appium Server setup to automate android testing on real devices
Graylog2 / docker-compose
A set of Docker Compose files that allow you to quickly spin up a Graylog instance for testing or demo purposes.
levnikolaevich / claude-code-skills
Standalone skills for Claude Code and Codex: product discovery, architecture, implementation, technical foundations, reviews and delivery, with explicit scope and verification.
xsser / dig
By spoofing the domain name response information of dig to deceive DeepSeek/GLM into implementing automated penetration testing for you.通过修改dig的域名返回信息欺骗让deepseek /glm为你实现自动化的渗透测试
LambdaTest / rook
rook by TestMu AI: Agent Assurance from the terminal. Test how your AI agents actually behave across workflows, tools, and actions, and catch failures and vulnerabilities before they ship.
nexovir / Forbidra
A bug bounty tool for bypassing 401/403 access restrictions and testing endpoint accessibility.
UseOSINT / Skills
28 OSINT Agent Skills that turn Cursor, Claude & AI coding agents into a full open-source intelligence platform — reconnaissance, attribution, GEOINT, breach checks & due diligence. Ethical, sourced, passive-first.
sanjarbiy / bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits early.