#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
dragonked2/egyscanEgyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious…
wh04m1001/cve-2023-21752Proof-of-concept exploit for CVE-2023-21752, an arbitrary file delete vulnerability in Windows Backup service, with two variants including privilege…
icyguider/icmp-transfertoolsTransfer files to and from a Windows host via ICMP in restricted network environments.
gdssecurity/wifitapwifitap updated for BT5r3
sensepost/malletMallet is an intercepting proxy for arbitrary protocols
tcstool/fireawayNext Generation Firewall Audit and Bypass Tool
omribaso/rtoolzA Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.
catsploit/catsploitAutomated penetration testing tool using Cyber Attack Techniques Scoring (CATS) to select and execute optimal attack scenarios via Metasploit, Nmap,…
emredavut/cve-2025-55182Chrome extension and Shodan scanner for detecting and demonstrating RCE vulnerabilities in React Server Components (RSC) and Next.js applications,…
wh00hw/pyflipperFlipper Zero Python CLI Wrapper
irsdl/ysonetDeserialization payload generator for a variety of .NET formatters
rynosec/leakeyValidates leaked API tokens and keys using customizable JSON-based signature checks. Designed for pentesters and bug hunters to determine the impact…
eng1ndes/northstarc2Web Based Command Control Framework (C2) #C2 #PostExploitation #CommandControl #RedTeam #C2Framework #PHPC2 #.NETMalware #Malware #PHPMalware #CnC…
clu3bot/owtUpdate Version 3.1 added free SMS messaging.
preempt/credsspA code demonstrating CVE-2018-0886
paradoxis/flask-unsignCommand line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
fox-it/cve-2019-1040-scannerSMB vulnerability scanner that detects CVE-2019-1040 by sending invalid NTLM authentication packets, enabling MIC Remove relay attacks for domain…
josue87/gotatorGotator is a tool to generate DNS wordlists through permutations.
