#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
gerbenjavado/linkfinderA python script that finds endpoints in JavaScript files
esrrhs/pingtunnelPingtunnel is a tool that send TCP/UDP traffic over ICMP
guardicore/monkeyInfection Monkey - An open-source adversary emulation platform
hamed233/cybersecurity-mastery-roadmapA comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance
specterops/bloodhoundSix Degrees of Domain Admin
itm4n/privesccheckPrivilege Escalation Enumeration Script for Windows
urbanadventurer/whatwebNext generation web scanner
undeadsec/socialfishModern dynamic phishing toolkit for authorized red team exercises. Clones login pages, captures credentials, cookies, and 2FA codes with a live…
lefayjey/linwinpwnBash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via LDAP, RPC,…
cifertech/esp32-divESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
hackplayers/evil-winrmThe ultimate WinRM shell for hacking/pentesting
ivre/ivreNetwork recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive…
pentestmonkey/php-reverse-shellPHP script that establishes a reverse shell from a target server to the attacker's machine, enabling remote command execution and post-exploitation…
jtesta/ssh-auditSSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
rapid7/metasploit-payloadsUnified repository for different Metasploit Framework payloads
bo0om/fuzz.txtPotentially dangerous files
e-m-b-a/embaEMBA - The firmware security analyzer
andresriancho/w3afOpen-source web application security scanner that identifies and exploits 200+ vulnerabilities including XSS, SQL injection, and OS commanding.…
