Penetration testing methodologies, frameworks, reporting, and automation tools.
masterking32/masterhttprelayvpnDomain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps Script with MITM TLS interception, HTTP/1-2 multiplexing, and DPI evasion.
frohoff/ysoserialA proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
palahsu/ddos-ripperPython-based DDoS attack tool for flooding targets with traffic via IP and port specification. Designed for educational stress-testing and network…
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
0dayctf/reverse-shell-generatorHosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
gtworek/psbitsSimple (relatively) things allowing you to dig a bit deeper than usual.
7h30th3r0n3/evil-m5projectMulti-purpose WiFi penetration testing toolkit for M5Stack devices. Performs network scanning, evil-twin attacks, deauthentication, captive portal…
ivre/ivreNetwork recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive…
yogeshojha/renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…
orange-cyberdefense/goadAutomated vulnerable Active Directory lab suite for practicing penetration testing techniques, with prebuilt domains/forests and standalone attack…
owasp/www-communityOWASP Community Pages are a place where OWASP can accept community contributions for security-related content.
six2dez/pentest-bookCurated penetration testing wiki with daily-updated techniques, scripts, and checklists for reconnaissance, web, cloud, mobile, and…
ljagiello/ctf-skillsAgent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
rub-nds/pretPrinter Exploitation Toolkit - The tool that made dumpster diving obsolete.
tencent/ai-infra-guardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
chybeta/web-security-learningWeb-Security-Learning
greenwolf/social_mapperA Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
