#1Integrated platforms for developing, executing, and managing penetration tests.
Kitploit recommended
hahwul/mad-metasploitMetasploit custom modules, plugins, resource script and.. awesome metasploit collection
nu11secur1ty/kali-linuxKali Linux advanced setup
shellphish/ictf-frameworkOpen-source framework for hosting Attack/Defense CTF competitions with automated gamebot, script execution, VPN routing, and cloud-based…
boostsecurityio/smokedmeatA CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
mrprogrammer2938/black-toolInstall the tools and start Attacking , black-tool v5.5.5 ! ⬛
mythicagents/medusaCross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…
jakobfriedl/conquestConquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.
gl4ssesbo1/nebulaNebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to…
m3rcer/chisel-strikeA .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
qsecure-labs/overlordPython-based CLI for automated red team infrastructure deployment on AWS and Digital Ocean, with modular support for C2, email servers, HTTP…
seanheelan/anamnesis-releaseEvaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…
mazen160/shenninaAutomating Host Exploitation with AI
b4rtik/redpeanutRedPeanut is a small RAT developed in .Net Core 2 and its agent in .Net 3.5 / 4.0.
arno0x/dbc2DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine,…
rand0m1ze/ezsploitLinux bash script automation for metasploit
trustedsec/tapThe TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
entysec/hatsploitModular penetration testing platform that enables you to write, test, and execute exploit code.
kvasirsecurity/kvasirKvasir: Penetration Test Data Management
