#1Adversary simulation, red team infrastructure, C2 frameworks, and operational security tools.
Kitploit recommended
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
laramies/theharvesterE-mails, subdomains and names Harvester - OSINT
matrixtm/mhddosBest DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
gtfobins/gtfobins.github.ioGTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
infosecn1nja/red-teaming-toolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
justcallmekoko/esp32marauderA suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
bishopfox/sliverAdversary Emulation Framework
beefproject/beefThe Browser Exploitation Framework Project
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
gentilkiwi/mimikatzA little tool to play with Windows security
projectdiscovery/subfinderFast passive subdomain enumeration tool.
ignitetechnologies/mindmapThis repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give…
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
kgretzky/evilginx2Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…
trustedsec/social-engineer-toolkitThe Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
nvidia/garakModular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…
