#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
ascit31/dark-moonAutonomous AI pentesting engine, continuous offensive security across web, cloud, AD & Kubernetes. Agentic reasoning + real exploit execution deliver…
dradis/dradis-ceDradis Framework: Collaboration and reporting for IT Security teams
knownsec/pocsuiteThis project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.
nettitude/poshc2A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
archstrike/archstrikeAn Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.
berylliumsec/nebulaAI-powered penetration testing assistant that automates reconnaissance, vulnerability analysis, and note-taking via integrated LLMs and CLI tool…
zakirkun/guardian-cliGuardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate…
koutto/jok3rJok3r v3 BETA 2 - Network and Web Pentest Automation Framework
ascotbe/medusa🐈Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中
reconmap/reconmapReconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from…
reverseclabs/c3Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive…
adrmxr/kithackHacking tools pack & backdoors generator.
dronesploit/dronesploitMetasploit-style console framework for pentesting commercial drones, featuring modular exploits for wireless attacks, SSID/password manipulation, and…
p3nt4/nuagesA modular C2 framework
darkr4y/geaconPractice Go programming and implement CobaltStrike's Beacon in Go
fsociety-team/fsocietyA Modular Penetration Testing Framework
s0ld13rr/pentestcodeAutonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…
qi4l/jysoDual-purpose JNDI injection and Java deserialization exploitation framework with advanced bypass capabilities for WAF, RASP, and high JDK versions.…
