#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
jm33-m0/emp3r0rSelf‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
absllk/hexestraAI-native penetration testing IDE where operators and an AI agent share browser, terminals, traffic capture, shells, asset graph, tasks, and evidence…
sliverarmory/sliver-guiCross-platform Electron GUI for the Sliver C2 framework, providing session and beacon dashboards, payload generation, listeners, loot, and cloud…
datadog/stratus-red-team:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
ne0nd0g/merlinMerlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
securecodebox/securecodeboxKubernetes-native security scanning orchestrator that automates continuous vulnerability detection by integrating multiple open-source scanners into…
bishopfox/joroA collaborative web exploitation framework.
fraunhofer-aisec/galliaExtendable pentesting framework for automotive UDS interfaces, enabling reproducible scans, diagnostic trouble code reading, and post-processing via…
strategic-automation/violinAgentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…
rapid7/metasploit-payloadsUnified repository for different Metasploit Framework payloads
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
shinthink/blitzstrikeMCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…
b23r0/heroinnA cross platform C2/post-exploitation framework.
mythicagents/thanatosMythic C2 agent targeting Linux and Windows hosts written in Rust
its-a-feature/mythicA collaborative, multi-platform, red teaming framework
vqkro/ultrasploiterA single binary that folds a port scanner, the full Exploit-DB index (47k entries) and runnable exploit modules into one tool. Written in Rust, runs…
broskigx/oihk-pentestingAutonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible…
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
