Penetration Testing Frameworks

berylliumsec/nebula

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

mr-rizwan-syed/chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…

redeye-framework/redeye

Collaborative pentest data management platform for organizing servers, users, vulnerabilities, attack vectors, and files with API access and graph…

cybercx-sta/purpleops

An open-source self-hosted purple team management web application.

fox-it/ldapfragger

C2 tool routing Cobalt Strike beacon data over LDAP user attributes for stealthy command-and-control in segmented networks.

01rabbit/pakuri-thon

PAKURI-THON is a tool that supports pentesters with various pentesting tools and C4 server (command & control and chat & communication server).…

threatexpress/threatbox

Ansible-based attack platform for deploying and managing a standardized Linux penetration testing environment with automated tool installation,…

halencarjunior/bugbuntu

BugBuntu Linux

andromeda1957/netpwn

Tool made to automate tasks of pentesting.

safebuffer/metateta

Automated network protocol scanner and exploiter leveraging Metasploit modules for rapid penetration testing across large networks, supporting SMB,…

chopicalqui/kaliintelligencesuite

Automated intelligence-gathering framework that orchestrates Kali Linux tools and public APIs to collect, store, and analyze reconnaissance data for…

mgeeky/threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners…

klezvirus/inceptor

Template-Driven AV/EDR Evasion Framework

cyberark/kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

its-a-feature/mythic

A collaborative, multi-platform, red teaming framework

qsecure-labs/overlord

Python-based CLI for automated red team infrastructure deployment on AWS and Digital Ocean, with modular support for C2, email servers, HTTP…

skiller9090/lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build…

kcarretto/paragon

Red Team engagement platform with the goal of unifying offensive tools behind a simple UI