#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended
lanmaster53/recon-ngOpen Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
rapid7/metasploitable3Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
blacklanternsecurity/bbotThe recursive internet scanner for hackers. 🧡
lionsec/katoolinAutomatically install all Kali linux tools
firerpa/lamdaAndroid Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…
tencent/ai-infra-guardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
techchipnet/camphishGrab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.
oj/gobusterDirectory/File, DNS and VHost busting tool written in Go
bittersecurity/decepticonAutonomous LLM red team agent that plans and executes full attack chains—recon, exploitation, privilege escalation, lateral movement and C2—inside an…
tennc/webshellThis is a webshell open source project
azeemidrisi/phonesploit-proAn all-in-one hacking tool to remotely take over Android devices.
specterops/bloodhound-legacySix Degrees of Domain Admin
secwiki/linux-kernel-exploitslinux-kernel-exploits Linux平台提权漏洞集合
mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
daffainfo/allaboutbugbountyAll about bug bounty (bypasses, payloads, and etc)
v4bel/dirtyfragLinux kernel privilege escalation exploit chaining two page-cache write vulnerabilities (CVE-2026-43284, CVE-2026-43500) for deterministic root…
devsecops/awesome-devsecopsAn authoritative list of awesome devsecops tools with the help from community experiments and contributions.
