#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
whispergate/msteamsMythic C2 profile that tunnels agent traffic through Microsoft Teams channels using the Microsoft Graph API, with AES256 encryption, jitter, kill…
tc4dy/cve-2026-54121-poc-exploit👻 CVE-2026-54121 - Best CertiGhost AD CS Multi-Exploit Framework | Advanced toolkit with rogue DC/LDAP servers, certificate abuse, PKINIT hash…
galoryber/fawkesFawkes is a golang Mythic C2 Agent exclusively written by AI.
jas502n/burpsuite-pluginPlugin For BurpSuite (Pentester)
mythicc2profiles/httpxConfigurable, Community driven, HTTP C2 Profile
vigiloss/vigilAI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypotheses, false…
cisc0-gif/kittPython-Based Pentesting Framework
cogensec/gideonAutonomous security operations agent for threat intelligence, vulnerability research, IOC analysis, and red teaming. Supports dual-mode operations…
owasp/redteamtoolkitThe WASM Based Security Toolkit for the Web First Paradigm
nccgroup/cowcloudServerless AWS solution for distributing recon and vulnerability scanning workloads. Submit tasks via web UI; EC2 workers execute custom Python…
kyle41111/ai-fileA listener profile for the Mythic C2 framework that utilizes AI vendors file API's
ascr0b/pcwtWeb-based project management interface for penetration testing and bug bounty workflows, automating port scanning with Nmap/Masscan and subdomain…
vonahisec/pentesting_scriptsThis repository contains a list of tools that may be useful for consultants performing penetration testing engagements.
erarnitox/malvexc2A simple C2 Framework written in modern C++
qmadev/crabloaderRust-based User-Defined Reflective Loader for Cobalt Strike payloads. Avoids RWX memory pages for OPSEC safety. Includes an extractor tool for loader…
karmanya03/overthroneAll-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…
riswandans/litesploitlibrary and intepreter for penetration testing tools
noptrix/nullscanA modular framework designed to chain and automate security tests.
