#1Tools for discovering network topology, devices, and services.
Kitploit recommended
affolter-engineering/snmpenSNMP enumeration tool that queries SNMPv1/v2c hosts to extract system information, TCP connections, and write access for penetration testing and…
jenderal92/reverse-ip-new-apiThis tool is used to perform reverse IP lookups— searching for all domains hosted on one IP address.
george0papasotiriou/cve-2026-11106-dns-zone-transfer-axfr-information-disclosureProof-of-concept for CVE-2026-11106 exploiting unrestricted DNS AXFR zone transfers to enumerate domain records, expose internal hosts, and leak…
pqcworld/pqauditScan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.
rhimavanth32-max/metasploitable2-reconnaissance-and-unrealircd-backdoor-exploitationEnd-to-end recon and exploitation of a known backdoor (CVE-2010-2075) on Metasploitable2 using Nmap and Metasploit.
danreis20/pentest-lab-metasploitable2Laboratório de pentest em rede isolada: enumeração com nmap/nikto e exploração manual do Metasploitable2 (backdoor vsFTPd CVE-2011-2523, bindshell)…
deade1e/radarThe hackable network scanner
fa1dz/internet-scannerA Tkinter GUI that scans a local IPv4 network (ARP + nmap probing), shows devices, lets you run full port scans, and export results.
sakispat/simple-pentestingAn educational Python toolkit for authorized penetration testing: threaded port scanner, subdomain & directory enumeration, banner grabber and host…
jenderal92/all-reverseip-multithreadingpython 2.7
stiffies/airscoutA nice tool that automates network hash capturing and has a nice GUI. Read README.md for more information and NEVER use this without explicit…
ohhdamnbro/noregresshCVE-2024-6387 and more Checker and Exploiter - Reverse/Bind-Shell Support. education only
netomize/http-basmaIn the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…
abdullah50i/internal-penetration-testing-project-using-metasploitInitialized & connected PostgreSQL to Metasploit. Reconnoitered 10.1.16.0/24 with Nmap and imported results. Enumerated hosts/services using SYN, SMB…
feralthedogg/cve-2025-24132-scannermDNS-based AirPlay device discovery tool that scans local networks and tests for CVE-2025-24132 zero-click HTTP RCE vulnerability with a simple GUI…
infobyte/doggie_workshopCAN Bus vehicle simulator for practicing offensive automotive security attacks. Emulates multiple ECUs to enable sniffing, injection, and…
murataydemir/active-scanning-and-information-gathering-in-ics-scada-networks-using-network-mapper-nmapActive Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper (NMAP) (Turkish)
alan-baigorria/dscannerDScanner es una herramienta en bash que automatiza la fase de reconocimiento en auditorías de seguridad web, integrando múltiples utilidades (dig,…
