#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
0x90n/infosec-black-fridayAll the deals for InfoSec related software/tools this Black Friday
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
may215/awesome-termux-hacking⚡️An awesome list of the best Termux hacking tools
ghostpack/seatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security…
ottosulin/awesome-ai-securityA collection of awesome resources related AI security
drk1wi/modlishkaModlishka. Reverse Proxy.
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
lgandx/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
0dayctf/reverse-shell-generatorHosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
hackerschoice/thc-tips-tricks-hacks-cheat-sheetVarious tips & tricks
foospidy/payloadsGit All the Payloads! A collection of web attack payloads.
xmendez/wfuzzModular web fuzzer for automated security testing. Injects payloads into any HTTP request field to discover vulnerabilities, brute-force parameters,…
entysec/ghostGhost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.
1n3/intruderpayloadsA collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
projectdiscovery/interactshAn OOB interaction gathering server and client library
masterking32/masterhttprelayvpnDomain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps Script with MITM TLS interception, HTTP/1-2 multiplexing, and DPI evasion.
sooryathejas/metatronAI-powered penetration testing assistant using local LLM on linux (Parrot OS)
palahsu/ddos-ripperPython-based DDoS attack tool for flooding targets with traffic via IP and port specification. Designed for educational stress-testing and network…
