vxcontrol / pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
vxcontrol / pentagi
Armur-Ai / Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning β supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
SelfGeckoBoiler / rpocket-team-Python-Memory-Forge
Far Cry 3 Memory Editor Python Script 2026: Modify Health, Money, Ammo and Items
futurefollowerfury / resp-CSGO-WeaponSelector
A plugin for Counter-Strike: Global Offensive to switch between weapons after the inventory system went down
irraz / vulnerator-ai
Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.
kamalx06 / TornadoC2
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
usestrix / strix
Open-source AI penetration testing tool to find and fix your appβs vulnerabilities.
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
SWE-agent / SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
justcallmekoko / ESP32Marauder
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
toniblyx / my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
SnailSploit / Claude-Red
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface β from SQLi to shellcode, EDR evasion to exploit development.
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password π‘οΈ
elementalsouls / Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
nicocha30 / ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
cifertech / ESP32-DIV
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
0xsyr0 / Awesome-Cybersecurity-Handbooks
A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.
gadievron / raptor
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
Flangvik / SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
Hacking-the-Cloud / hackingthe.cloud
An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
dirkjanm / ROADtools
A collection of Azure AD/Entra tools for offensive and defensive security purposes
Syslifters / sysreptor
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
x90skysn3k / brutespray
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
owtf / owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
vulnersCom / getsploit
Search and download public exploits from the Vulners database β online, or fully offline from a local SQLite FTS5 index.
JesseCHale / HaleHound-CYD
ESP32-DIV HaleHound Edition for Cheap Yellow Display - Multi-protocol offensive security toolkit
0xSteph / pentest-ai
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
nikaiw / VMkatz
Extract Windows credentials directly from VM memory snapshots and virtual disks
JoasASantos / NeuroSploit
NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.
trhhubsd / ARTEX
ARTEX Β· AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) Β· AI θͺδΈ»ζΈιζ΅θ―η³»η» Β· ηΎεΊ¦ agent+ ζ»ι²ζζθ΅ε ε
jiep / offensive-ai-compilation
A curated list of useful resources that cover Offensive AI.
7h30th3r0n3 / Raspyjack
Small offensive network toolkit for Raspberry Pi (+ Waveshare 1.44β³ LCD HAT) and Cardputer Zero inspired by pager and sharkjack fonctionnalities. For redteam and educational purposes only.
laluka / bypass-url-parser
bypass-url-parser
ASCIT31 / Dark-Moon
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.
OffensivePython / Saddam
DDoS Amplification Tool
SpecterOps / Nemesis
An offensive data enrichment pipeline
goshs-labs / goshs
Feature-rich single-binary file server for red teamers and developers. HTTP/S Β· WebDAV Β· FTP/SFTP Β· SMB Β· LDAP/S Β· NTLM hash capture Β· DNS/SMTP callbacks Β· TLS Β· Auth Β· Share links. A powerful python3 -m http.server replacement.
cdxiaodong / cain-agent
Real-world AI penetration testing engineer for authorized assessments β built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
Zyrexnn / Cybermes
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
s0ld13rr / pentestcode
PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
actuator / Android-Security-Exploits-YouTube-Curriculum
πA Curated List Of Modern Android Exploitation Conference Talks
h5i-dev / h5i
Unified Rust framework for building, verifying, and testing web apps. Kernel-based architecture for Lean 4 verification and GPU acceleration. Built-in red-teaming tools for automated vulnerability detection.
SudoHopeX / KaliGPT
KaliGPT: an Agentic AI (built with Gemini, ChatGPT, Ollama, OpenRouter Models) fine tuned for ethical hackers & students in offensive security making workflows smarter, faster, and more accessible.
JoasASantos / Offensive-Security-AI-Models
Uncensored AI models or those fine-tuned for cybersecurity tasks.
Frissi0n / GTFONow
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
pablosnt / rekono
Offensive security platform that automates attack surface discovery and vulnerability management
pnxenopoulos / awpy
Python library to parse, analyze and visualize Counter-Strike 2 data
FishCodeTech / muteki
Project Muteki (η‘ζ΅): Open-source AI-powered offensive security harness for automated penetration testing.
edoardottt / csprecon
Discover new target domains using Content Security Policy
0sec-labs / 0
The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.
shinthink / blitzstrike
Blitz Strike β a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
deonmenezes / mantishack
Mantis Hack
S1N6H / pentest-harness
Pentest Harness β Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.
martian56 / redcell
AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SARIF output. FastAPI + React.
ADScanPro / Claude-AD
Active Directory pentest methodology for Claude Code: skills, agents and slash commands for internal AD red-team work (Kerberoasting, ADCS ESC1-17, DCSync, ACL abuse, NTLM relay, delegation), with per-technique OPSEC/telemetry notes. Drives netexec, impacket, certipy, bloodyAD, BloodHound CE.