#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
nvidia/garakModular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…
rofl0r/proxychains-ngproxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…
swe-agent/swe-agentLLM-powered agent that autonomously fixes GitHub issues, finds cybersecurity vulnerabilities, and solves CTF challenges using configurable tool-use…
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
secwiki/windows-kernel-exploitswindows-kernel-exploits Windows平台提权漏洞集合
streaak/keyhacksCurated collection of commands to validate leaked API keys from bug bounty programs and penetration tests, covering 80+ services including AWS,…
testssl/testssl.shTesting TLS/SSL encryption anywhere on any port
nomi-sec/poc-in-github📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
threat9/routersploitExploitation Framework for Embedded Devices
fuzzdb-project/fuzzdbDictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
x4nth055/pythoncode-tutorialsThe Python Code Tutorials
jassics/security-study-planComplete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
blackarch/blackarchAn ArchLinux based distribution for penetration testers and security researchers.
goochbeater/spiritual-spell-red-teamingA repo for jailbreaking various LLMs, mainly Claude
firerpa/lamdaAndroid Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…
snailsploit/claude-redCurated library of 78 offensive security SKILL.md modules that prime Claude with expert red team methodology across web, AD, wireless, cloud, and…
