Penetration Testing

lascc/hacktools

The all-in-one browser extension for offensive security professionals 🛠

rosesecurity/red-teaming-ttps

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

kelvinben/appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

liamg/traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w…

21y4d/nmapautomator

A script that you can run in the background!

ticarpi/jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

redsiege/eyewitness

Automated web screenshot tool for reconnaissance, capturing site visuals, server headers, and identifying default credentials. Supports multiple…

madhuakula/kubernetes-goat

Intentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…

blacklanternsecurity/writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

t3l3machus/hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

theporgs/exegol

Fully featured and community-driven hacking environment

trickest/wordlists

Real-world infosec wordlists, updated regularly

rhinosecuritylabs/pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

pwntester/ysoserial.net

Deserialization payload generator for a variety of .NET formatters

i-am-shodan/usbarmyknife

USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

limerboy/impulse

💣 Impulse Denial-of-service ToolKit