#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended
pikpikcu/aireconAIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual…
login-securite/donpapiAutomated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and configuration files…
nicholasaleks/damn-vulnerable-droneDamn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a…
neo23x0/muninOnline hash checker for Virustotal and other services
fiddyschmitt/file-tunnelTunnel TCP connections through a file
koutto/jok3rJok3r v3 BETA 2 - Network and Web Pentest Automation Framework
dliv3/venomVenom - A Multi-hop Proxy for Penetration Testers
stealthcopter/deepceDocker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)
misp/misp-galaxyClusters and elements to attach to MISP events or attributes (like threat actors)
gianlucaborello/libprocesshiderLD_PRELOAD shared library that hides a Linux process from tools like ps and lsof by intercepting readdir and proc filesystem calls.
srixivas/pcapxray❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…
farrokhi/dnsdiagDNS Measurement, Troubleshooting and Security Auditing Toolset
arvanaghi/sessiongopherSessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY,…
t3l3machus/toxssinAn XSS exploitation command-line interface and payload generator.
knavesec/credmasterRefactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
projectdiscovery/cloudlistCloudlist is a tool for listing Assets from multiple Cloud Providers.
cobbr/sharpsploitSharpSploit is a .NET post-exploitation library written in C#
dirkjanm/adidnsdumpActive Directory Integrated DNS dumping by any authenticated user
