Penetration Testing Frameworks

kryptsec/oasis

Open-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.

cappricio-securities/socialengineering-templates

a SET framework templates

codextf2/cobaltstrike_bofloader

open source port/reimplementation of the Cobalt Strike BOF Loader as is

qmadev/crabloader

Rust-based User-Defined Reflective Loader for Cobalt Strike payloads. Avoids RWX memory pages for OPSEC safety. Includes an extractor tool for loader…

adaptix-framework/adaptixc2

AdaptixC2 is a highly modular advanced redteam toolkit

mr-rizwan-syed/chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to…

shipsecai/studio

Workflow automation for Security Teams

antonlovesdnb/ttprunner

Run TTPs, with AI!

bhavsec/autopentest-ai

Agentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.

sobri3195/-pegasus-suite

A comprehensive security toolkit with 1000+ penetration testing and security assessment tools.

gh05tcrew/metasploitmcp

MCP Server for Metasploit

seanheelan/anamnesis-release

Evaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…

itaymigdal/nimbo-c2

Nimbo-C2 is yet another (simple and lightweight) C2 framework

infobyte/faraday_agent_dispatcher

Faraday Agent Dispatcher launches any security tools and send results to Faradaysec Platform.

lglznl/klaios

KLAIOS is a hybrid security environment that merges Kali Linux’s offensive toolkit with hardened, VPN-bunker-style isolation—enhanced by modern AI…

fsociety-team/fsociety

A Modular Penetration Testing Framework

leviticus-triage/chromsploit-framework

Advanced AI-Powered Exploitation Framework | CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397 |