RedTeam-Tools
a-poc/redteam-toolsTools and Techniques for Red Team / Penetration Testing
osintprivilege-escalationreconnaissance+7
Penetration testing methodologies, frameworks, reporting, and automation tools.
a-poc/redteam-toolsTools and Techniques for Red Team / Penetration Testing
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
fuzzdb-project/fuzzdbDictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
s1ckb0y1337/active-directory-exploitation-cheat-sheetA cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
testssl/testssl.shTesting TLS/SSL encryption anywhere on any port
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
sullo/niktoNikto web server scanner
sensepost/objectionFrida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…
nvidia/garakModular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…
jassics/security-study-planComplete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so…
vxcontrol/pentagiFully autonomous AI Agents system capable of performing complex penetration testing tasks
yeyintminthuhtut/awesome-red-teamingList of Awesome Red Teaming Resources
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
rebootuser/linenumScripted Local Linux Enumeration & Privilege Escalation Checks
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
leebaird/discoverCustom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…