Integrated platforms for developing, executing, and managing penetration tests.
cervantessec/cervantesOpen-source collaborative platform for pentesters and red teams to manage projects, clients, vulnerabilities, and generate OWASP-compliant reports…
securecodebox/securecodeboxKubernetes-native security scanning orchestrator that automates continuous vulnerability detection by integrating multiple open-source scanners into…
fraunhofer-aisec/galliaExtendable pentesting framework for automotive UDS interfaces, enabling reproducible scans, diagnostic trouble code reading, and post-processing via…
m3rcer/chisel-strikeA .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
crossc2/crossc2kitCrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some interfaces for…
de3vil/stealingThe SteaLinG is an open-source penetration testing framework designed for social engineering
mgeeky/protectmytoolingMulti-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking,…
secureworks/whiskeysamlandfriendsPython-based framework for generating Golden SAML tokens, Kerberos tickets, and Azure Access Tokens to exploit federated identity systems and…
mazen160/shenninaAutomating Host Exploitation with AI
pablosnt/rekonoOffensive security platform that automates attack surface discovery and vulnerability management
t3l3machus/villainVillain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with…
chvancooten/nimplantA light-weight first-stage C2 implant written in Nim (and Rust).
jack-new-project/zeebsploitModular exploitation framework for penetration testing, featuring automated payload generation, reconnaissance modules, and post-exploitation…
dronesploit/dronesploitMetasploit-style console framework for pentesting commercial drones, featuring modular exploits for wireless attacks, SSID/password manipulation, and…
aaaguirrep/offensive-dockerOffensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.
pandasec888/taowu-cobalt_strike
mythicagents/thanatosMythic C2 agent targeting Linux and Windows hosts written in Rust
theporgs/exegolFully featured and community-driven hacking environment
