Penetration Testing Frameworks

redsiege/graphstrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

olacabs/jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

nccgroup/nccfsas

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

adshao/flounder

Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.

secdevops-cuse/cyberrange

The Open-Source AWS Cyber Range

qax-a-team/cobaltstrike-toolset

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

rvn0xsy/cooolis-ms

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快…

sigploiter/sigploit

SigPloit: Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP

postrequest/link

link is a command and control framework written in rust

owasp/zsc

OWASP ZSC - Shellcode/Obfuscate Code Generator https://www.secologist.com/

chvancooten/nimplant

A light-weight first-stage C2 implant written in Nim (and Rust).

allfro/sploitego

Maltego Penetration Testing Transforms

cybercx-sta/purpleops

An open-source self-hosted purple team management web application.

aaaguirrep/offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

r-s0n/ars0n-framework

Modular bug bounty hunting framework automating reconnaissance, subdomain enumeration, and vulnerability scanning with an educational focus to help…

rajanagori/nightingale

Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes…

ronin-rb/ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of…

grisuno/lazyown

Red team framework and multi-operator C2 platform with AI agents, malleable implants, rootkits, phishing engine, and 741 CLI commands covering the…