#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
ccob/lsarelayxSystem-wide NTLM relay tool that hooks Windows authentication APIs to relay incoming NTLM connections, downgrade Kerberos, and dump NetNTLM hashes…
codewatchorg/sqlipySQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
alptexans/rsc-detect-cve-2025-55182RSC Detect CVE 2025 55182
crisprss/rasmanpotatoAbuse Impersonate Privilege from Service to SYSTEM like other potatoes do
morpheuslord/gpt_vuln-analyzerUses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports…
tarlogicsecurity/chankroHerramienta para evadir disable_functions y open_basedir
takuzoo3868/pentaOpen source all-in-one CLI tool to semi-automate pentesting.
xnl-h4ck3r/xnlrevealA Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements…
m8sec/pymetaUtility to download and extract document metadata from an organization. This technique can be used to identify: domains, usernames, software/version…
g3tsyst3m/elevationstationelevate to SYSTEM any way we can! Metasploit and PSEXEC getsystem alternative
libnet/nemesisA command-line network packet crafting and injection utility
bao7uo/rau_cryptoTelerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)
anshumanpattnaik/http-request-smugglingCLI tool to detect HTTP Request Smuggling vulnerabilities using time-delay analysis with built-in CL.TE and TE.CL payloads for automated security…
cyberark/riskyspnDetect and abuse risky SPNs
hood3drob1n/bingooBinGoo! A Linux bash based Bing and Google Dorking Tool
nccgroup/autochromeThis tool downloads, installs, and configures a shiny new copy of Chromium.
cisco-sas/kittyFuzzing framework written in python
