#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
ashishb/android-security-awesomeA collection of android security related resources
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
laramies/theharvesterE-mails, subdomains and names Harvester - OSINT
bee-san/ciphey⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
openwall/johnJohn the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems,…
trickest/cveGather and update all available and newest CVEs with their PoC.
kathanp19/howtohuntCollection of methodology and test case for various web vulnerabilities.
nvidia/skillspectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…
matrixtm/mhddosBest DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
mr-xn/penetration_testing_poc渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor…
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…
djsime1/awesome-flipperzero🐬 A collection of awesome resources for the Flipper Zero device.
sbilly/awesome-securityA collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
owasp/mastgComprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…
ffuf/ffufFast web fuzzer written in Go
