#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
purpleailab/decepticonAutonomous Hacking Agent for Red Team
ostorlab/oxoModular security scanning orchestrator that combines specialized agents for vulnerability detection, reconnaissance, and fingerprinting across…
yaklang/yakitAll-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
mrwadams/stride-gptAn AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE…
berylliumsec/nebulaAI-powered penetration testing assistant that automates reconnaissance, vulnerability analysis, and note-taking via integrated LLMs and CLI tool…
samugit83/redamonAutonomous AI red team framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings,…
bishopfox/sliverAdversary Emulation Framework
reconmap/reconmapReconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from…
stillbigjosh/adaptix-serverless-c2Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.
aflplusplus/libaflAdvanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
freelabz/secatorsecator - the pentester's swiss knife
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
dradis/dradis-ceDradis Framework: Collaboration and reporting for IT Security teams
cervantessec/cervantesOpen-source collaborative platform for pentesters and red teams to manage projects, clients, vulnerabilities, and generate OWASP-compliant reports…
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
