#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
som3canadian/some-toolsSome Pentest Tools. Install and keep up to date some pentesting tools. I used this to pass my OSCP exam.
truneski/external_c2_frameworkPython api for usage with cobalt strike's External C2 specification
kuwaitist/astral_projectionCobalt Strike UDRL that performs advanced module stomping using VEH to intercept calls, unmap modules during sleep, and remap fresh modules to evade…
algosecure/pollenisatorCollaborative pentest tool with highly customizable tools
g13net/lockjawModular Windows C2 framework with a Rust teamserver, Zig implant, indirect syscalls, AMSI bypass, reflective/PoolParty injection, in-memory BOF…
pard0p/remote-bof-runnerRemote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal Palace.
n0qword/mythic_ornnLLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.
bishopfox/joroA collaborative web exploitation framework.
kamalx06/tornadorevc2Modular post-exploitation framework managing reverse-shell sessions over TCP/TLS/mTLS with plugins for enumeration, in-memory execution, SOCKS5…
stillbigjosh/adaptix-serverless-c2Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.
matheusht/redthreadAn autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing precision…
kryptsec/oasisOpen-source AI security benchmarking CLI. Measure how AI models perform offensive security tasks with MITRE ATT&CK analysis and KSM scoring.
blacksnufkin/cheshireAdaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.
degenerat3/meteorA cross-platform C2/teamserver supporting multiple transport protocols, written in Go.
a7vinx/swarmA modular distributed penetration testing tool.
elevenpaths/siemframeworkModular Python3 attack framework for automating exploitation of SIEM platforms (Splunk, Graylog, OSSIM, QRadar, McAfee) via credential theft, payload…
rfunix/tenguAI-powered penetration testing MCP server
psmths/reaveWIP Post-exploitation framework tailored for hypervisors.
