kalil0321 / reverse-api-engineer
The agent that turns websites into APIs!
kalil0321 / reverse-api-engineer
martin-olivier / airgorah
A WiFi security auditing software
rawfilejson / awesome-osint-arsenal
Curated list and one-command installer for 750+ open-source intelligence and security tools across 50 categories.
VirtualPurser / Far-Cry-3-Value-Forge-resocket
Far Cry 3 Ultimate Trainer & Memory Editor 2026 Toolkit
irraz / vulnerator-ai
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
Kaliiiiiiiiii-Vinyzu / patchright
Undetected version of the Playwright testing and automation library.
JoasASantos / NeuroSploit
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
SuperManito / LinuxMirrors
GNU/Linux 更换系统软件源脚本及 Docker 安装与换源脚本
samugit83 / redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Alfredredbird / tookie-osint
Tookie is a advanced OSINT information gathering tool that finds social media accounts based on inputs.
Kaliiiiiiiiii-Vinyzu / patchright-python
Undetected Python version of the Playwright testing and automation library.
fb0sh / dsh-pentester
基于 DeepSeek Harness 的多 Agent PTES 渗透测试编排插件，支持自动化侦察、漏洞分析、验证与报告，使用 Docker/Kali 隔离工具箱 | Multi-agent PTES penetration testing plugin for DeepSeek Harness with automated recon, vulnerability analysis, validation, reporting, and Docker/Kali toolbox
AndronixApp / AndronixOrigin
Andronix: Linux distros on Android without root (Termux + proot), with desktops in Termux:X11. App 8.x scripts are on the master branch.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
AkaliKong / MiniOneRec
Minimal reproduction of OneRec
alkaline-ml / pmdarima
A statistical library designed to fill the void in Python's time series analysis capabilities, including the equivalent of R's auto.arima function.
KalicoCrew / kalico
Klipper, but Limitless
cxm947 / FakeLiang
基于攻击图的靶场自动验证，多agent框架，kali MCP，自动化编排，POC生成。
MingyiSecLab / Atlas
Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali sandbox, multi-provider LLM routing. 本地 AI 安全评估智能体桌面应用
RaspAP / raspap-webgui
The easiest, full-featured wireless router setup for Debian-based devices. Period.
leebaird / discover
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
ekalinin / github-markdown-toc
Easy TOC creation for GitHub README.md
hhhrrrttt222111 / Ethical-Hacking-Tools
Complete Listing and Usage of Tools used for Ethical Hacking
yogsec / Hacking-Tools
A curated list of 900+ penetration testing and ethical hacking tools.
owtf / owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
ekalinin / nodeenv
Virtual environment for Node.js & integrator with virtualenv
ekalinin / sitemap.js
Sitemap-generating framework for node.js
jonluca / anubis
Subdomain enumeration tool
blackhillsinfosec / WifiForge
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.
pikpikcu / airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.
goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Kaliiiiiiiiii-Vinyzu / patchright-nodejs
Undetected NodeJS version of the Playwright testing and automation library.
SudoHopeX / KaliGPT
KaliGPT: an Agentic AI (built with Gemini, ChatGPT, Ollama, OpenRouter Models) fine tuned for ethical hackers & students in offensive security making workflows smarter, faster, and more accessible.
ekalinin / github-markdown-toc.go
Easy TOC creation for GitHub README.md (in go)
akalikbergenov / cyclop
The MacBook notch as a working tool — media controls, file shelf, clipboard history, snippets, calendar, offline translation and a teleprompter. Native SwiftUI, zero dependencies, no permissions. Free and open source.
martian56 / redcell
AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SARIF output. FastAPI + React.
madeye / ServerBox
ServerBox: turn a used Android phone into a Linux server, no root required. Alpine, Arch, Debian, Kali and Ubuntu with an always-on SSH server.
armourinfosec / Wireless-Security-and-WiFi-Penetration-Testing
Open, hands-on study notes on wireless security & Wi-Fi penetration testing (802.11, WEP/WPA/WPA2/WPA3, aircrack-ng). CC BY 4.0.
obayalhindi / NetAudit-L2
ARP-spoofing based network visibility tool for Kali inux - active traffic redirection and DNS/TLS-SNI cature for a network you own or administer.
nvstarikov / kalinka-launcher
Калинка Лаунчер - единая точка входа в экосистему СТАРГРАДД: скачивание, установка, запуск и обновление всех продуктов в одном окне. Windows 10/11. Kalinka.Launcher — the single entry point to the STARGRADD digital : download, install, launch and update all products from one window. Windows 10/11.
pale-knight / redteam-skill
Redteam / Pentest Skill Pack — semi-automated workflow + on-demand module selection + real-world attack chains | Kali + Claude Code 红队/渗透/技能包 - 半自动工作流 + 按需点选模块 + 实战利用链 | 基于 Kali 与 Claude Code
AlexielArdilla / El-libro-secreto-de-bash-scripting
Guía práctica para aprender Bash Scripting desde cero y aplicarlo a Linux, Kali Linux y ciberseguridad. Incluye variables, validación de datos, funciones, procesamiento de archivos, Nmap, concurrencia, integración con Python y un framework final de auditoría para entornos autorizados.
simeulinuxkaliaiwr / aro
A tiling window manager for Wayland, built on wlroots. Minimal, flat, one accent colour, spring-animated.
xk11z / plutoxAI
本系统基于 **Windows + WSL (Kali Linux)** 双环境搭建，是一套整合多类AI安全工具的一体化渗透测试平台。系统将大语言模型能力与传统渗透测试工具深度结合，覆盖Web安全、内网攻防、二进制逆向、API测试、流量分析等多个安全领域，可实现渗透测试全流程的智能化、自动化提效。
digistoremaster / online-business-skalierung-tools
Automatisierter Export & Konsolidierung von PayPal-Transaktionen für Online-Händler im DACH-Raum. Multi-Account-Unterstützung, CSV/JSON-Export & 100% lokale DSGVO-konforme Datenspeicherung. Schluss mit manuellem Kontoauszug-Chaos!
M-med / Active-Directory-Simulation-Attack-
A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gMSA, tiering, LLMNR/NetBIOS disabling) with Wazuh SIEM detection rules mapped to MITRE ATT&CK.
cleonaia / hack_cameraWeb
This project is used analyzing my own webcam’s network traffic from Kali Linux. The workflow uses Ettercap for an ARP MiTM demonstration, Wireshark for traffic analysis and Metasploit as an external lab tool. This repository also includes camera discovery and authenticated RTSP playback.
Renegade-Penguin / Hammunition
Hammunition turns an existing Debian-family install into an amateur radio, SDR, and RF experimentation workstation. Primary target: Parrot OS. Also targeting Debian, Ubuntu, Kali, Linux Mint and Raspberry Pi OS.
SagarBiswas-MultiHAT / The-BlackHAT-roadmap
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
Chenggaorui / AutoSRC-AISkill
全自动SRC漏洞挖掘AI-Skill一体化技能包，整合主流开源资产搜集、漏洞扫描、AI 误报过滤、自动取证、漏洞报告生成工具链，面向零基础安全新手打造轻量化全自动 SRC 漏洞挖掘一体化技能包。内置子域名探测、目录爆破、漏洞批量扫描、AI 智能筛报、漏洞截图复现、SRC 标准化报告一键生成全流程自动化脚本，适配 Windows、Kali、Docker 云服务器多端部署，附带保姆级落地教程，仅可用于厂商公开授权范围内的安全测试。
animatlittlechild8 / Internet-Download-Manager-Engine
Download management tool for Windows. It helps users download files faster, organize downloads, resume interrupted transfers, and manage multiple downloads through a simple interface.