offsets dumper
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
Web path scanner
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
Cyber Security ALL-IN-ONE Platform
Linux privilege escalation auditing tool
A Modern Orchestration Engine for Security
An all-in-one hacking tool to remotely take over Android devices.
The Official USB Rubber Ducky Payload Repository
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
🕵️♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.
AI-powered bug bounty hunting toolkit that works with or without subscription.
Cameradar hacks its way into RTSP videosurveillance cameras
Awesome hacking is an awesome collection of hacking tools.
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。
Automated NoSQL database enumeration and web application exploitation tool.
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.
(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.
Complete Listing and Usage of Tools used for Ethical Hacking
A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.
Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Cybersecurity Harness
针对于红队攻击思维做出的red team模式(破限项目,封号概不负责)##可自行适配其他Agent。项目问题请提issue
🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.
Official repository of the DedSec Project.
Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!
A tool for remote ADB exploitation in Python3 for all Machines.
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.
A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.
i-Haklab is a hacking laboratory for Termux that contains open source tools for pentesting, scan/find vulnerabilities, explotation and post-explotation recommended by Ivam3 with automation hacking commands and many guides and tutorials to learn use it.
Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent
Free alternative to https://osint-ui.com
Far Cry 3 Memory Editor Python Script 2026: Modify Health, Money, Ammo and Items
Open Source Windows Memory Editor and Game Trainer Alternative 2026
Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit
Best Rebirth Pub Save Manager 2026: Edit Gold, AP & Stats
Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy.
Rebirth Pub Save Companion 2026: Best Save Editor for Gold AP Stamina and Items