#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
topjohnwu/magiskAndroid customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…
enaqx/awesome-pentestA collection of awesome penetration testing resources and tools
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
thingsboard/thingsboardAll-in-one IoT Platform - Device management, data collection, processing and visualization.
manisso/fsocietyfsociety Hacking Tools Pack – A Penetration Testing Framework
vitalysim/awesome-hacking-resourcesA collection of hacking / penetration testing resources to make you better!
fortra/impacketPython library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
mr-xn/penetration_testing_poc渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor…
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
gtfobins/gtfobins.github.ioGTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
secdev/scapyPython-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…
magic-wormhole/magic-wormholeget things from one computer to another, safely
infosecn1nja/red-teaming-toolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
moond4rk/hackbrowserdataExtract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
