#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
g13net/lockjawModular Windows C2 framework with a Rust teamserver, Zig implant, indirect syscalls, AMSI bypass, reflective/PoolParty injection, in-memory BOF…
tc4dy/cve-2026-54121-poc-exploit👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework | Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash…
archstrike/archstrikeAn Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
pablosnt/rekonoOffensive security platform that automates attack surface discovery and vulnerability management
adaptix-framework/adaptixc2AdaptixC2 is a highly modular advanced redteam toolkit
kryptsec/oasisOpen-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.
davidcarliez/mythic_telegram_profileMythic C2 profile that tunnels Athena and Apollo agent traffic through Telegram bot-to-bot messages, bridging encrypted payloads to Mythic via its…
horizon3ai/h3-cliCLI tool for the Horizon3.ai API
rajanagori/nightingaleNightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes…
karmanya03/overthroneAll-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…
mr-in4inci3le/sliver-guiA desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its…
youssefnoob003/sindrikitA foundational C library for building operationally credible offensive capabilities
matheusht/redthreadAn autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing precision…
nmht3t/onedrive-udc2OneDrive as a covert C2 transport for Cobalt Strike
boostsecurityio/smokedmeatA CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
mishakorzik/allhackingtoolsAll-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
opposum0112/cusimanseComposable research-contract and YAML-recipe framework for agent-operated security experiments on disposable compute
sensepost/objectionFrida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…
