Exploit Frameworks

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

0x4m4/hexstrike-ai

MCP server enabling AI agents to autonomously execute 150+ cybersecurity tools for automated penetration testing, vulnerability discovery, bug bounty…

fortra/impacket

Python library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…

edoardottt/awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

peass-ng/peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

trickest/cve

Gather and update all available and newest CVEs with their PoC.

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

gallopsled/pwntools

CTF framework and exploit development library

beefproject/beef

The Browser Exploitation Framework Project

bishopfox/sliver

Adversary Emulation Framework

gentilkiwi/mimikatz

A little tool to play with Windows security

angr/angr

A powerful and user-friendly binary analysis platform!

trustedsec/social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

greydgl/pentestgpt

Automated Penetration Testing Agentic Framework Powered by Large Language Models