#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended
vavkamil/awesome-bugbounty-toolsCurated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…
projectdiscovery/subfinderFast passive subdomain enumeration tool.
infoslack/awesome-web-hackingCurated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…
zeek/zeekZeek is a powerful network analysis framework that is much different from the typical IDS you may know.
trustedsec/social-engineer-toolkitThe Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
greydgl/pentestgptAutomated Penetration Testing Agentic Framework Powered by Large Language Models
mebus/cuppInteractive password profiler that generates targeted wordlists by gathering personal details about a user, used for penetration testing and forensic…
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
sjzar/chatlogchat log tool, easily use your own chat data. 聊天记录工具，轻松使用自己的聊天数据
jofpin/trapePeople tracker on the Internet: OSINT analysis and research tool by Jose Pino
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
nomi-sec/poc-in-github📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
mishakorzik/allhackingtoolsAll-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
bigbodycobain/shadowbrokerReal-time geospatial OSINT platform aggregating 60+ public telemetry feeds (ADS-B, AIS, satellites, CCTV) into a unified map with server-side recon…
telekom-security/tpotce🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
elder-plinius/t3mp3stautonomous red teaming platform; multi-agent offensive-security meta-harness
fuzzdb-project/fuzzdbDictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
