#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
garrytan/gstackUse Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA
hack-with-github/awesome-hackingA collection of various awesome lists for hackers, pentesters and security researchers
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
trimstray/the-book-of-secret-knowledgeA collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
z4nzu/hackingtoolAll-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
fatedier/frpA fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
danielmiessler/seclistsCurated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…
rustdesk/rustdeskAn open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
sherlock-project/sherlockHunt down social media accounts by username across social networks
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
openwrt/openwrtLinux operating system for embedded devices with writable filesystem, package management, and build framework. Enables custom firmware creation for…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
vulhub/vulhubPre-Built Vulnerable Environments Based on Docker-Compose
