six2dez / reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
six2dez / reconftw
nicocha30 / ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
maurosoria / dirsearch
Web path scanner
moonD4rk / HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
projectdiscovery / httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
AzeemIdrisi / PhoneSploit-Pro
An all-in-one hacking tool to remotely take over Android devices.
yashab-cyber / hackpilot
HackPilot Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices architecture, and comprehensive security frameworks to deliver professional-grade cybersecurity assessments.
JackJuly / linkook
🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.
Pennyw0rth / NetExec
The Network Execution Tool
itm4n / PrivescCheck
Privilege Escalation Enumeration Script for Windows
Mr-xn / BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
gwen001 / pentest-tools
A collection of custom security tools for quick needs.
dloss / python-pentest-tools
Python tools for penetration testers
lefayjey / linWinPwn
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
ffffffff0x / f8x
红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
noraj / haiti
:key: Hash type identifier (CLI & lib)
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
b23r0 / Heroinn
A cross platform C2/post-exploitation framework.
vmfunc / sif
the blazing-fast pentesting suite.
CompassSecurity / EntraFalcon
A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.
0rangec3t / Black-cat
Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture。一个假设-证据驱动的红队skill
g0h4n / PassTheCert-rs
Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀
xk11z / plutoxAI
本系统基于 **Windows + WSL (Kali Linux)** 双环境搭建，是一套整合多类AI安全工具的一体化渗透测试平台。系统将大语言模型能力与传统渗透测试工具深度结合，覆盖Web安全、内网攻防、二进制逆向、API测试、流量分析等多个安全领域，可实现渗透测试全流程的智能化、自动化提效。
MorDavid / NucleiSniper
AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.
duty1g / jspacket
a lightweight, fast, and fully portable reimplementation of Impacket in TypeScript and JavaScript.