#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
nmht3t/onedrive-udc2OneDrive as a covert C2 transport for Cobalt Strike
oritera/cairnLLM-driven state-space search engine for autonomous penetration testing, CTF solving, and vulnerability research. Uses blackboard architecture with…
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
praetorian-inc/wasmforgeWasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.
s0ld13rr/pentestcodeAutonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…
whispergate/msteamsMythic C2 profile that tunnels agent traffic through Microsoft Teams channels using the Microsoft Graph API, with AES256 encryption, jitter, kill…
azmisyahrul/prismsecSecure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
matheusht/redthreadAn autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing precision…
vigiloss/vigilAI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypotheses, false…
n0qword/mythic_ornnLLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.
s0lst1c3/dropengineDropEngine provides a malleable framework for creating shellcode runners, allowing operators to choose from a selection of components and combine…
sensepost/objectionFrida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…
mythicagents/medusaCross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…
linnemanlabs/glimmerAdversary emulation and C2 framework for security research
01rabbit/pakuri-thonPAKURI-THON is a tool that supports pentesters with various pentesting tools and C4 server (command & control and chat & communication server).…
adaptix-framework/adaptixc2AdaptixC2 is a highly modular advanced redteam toolkit
chopicalqui/kaliintelligencesuiteAutomated intelligence-gathering framework that orchestrates Kali Linux tools and public APIs to collect, store, and analyze reconnaissance data for…
cogensec/gideonAutonomous security operations agent for threat intelligence, vulnerability research, IOC analysis, and red teaming. Supports dual-mode operations…
