#1Tools and libraries for automating security tasks, workflows, and custom tool development.
Kitploit recommended
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
narkoz/hacker-scriptsCollection of humorous shell scripts automating personal tasks: texting late-work alerts, scanning emails for keywords, faking sick days, and brewing…
ffuf/ffufFast web fuzzer written in Go
pydantic/montyA minimal, secure Python interpreter written in Rust for use by AI
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
bishopfox/sliverAdversary Emulation Framework
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
projectdiscovery/subfinderFast passive subdomain enumeration tool.
otissymbos/cve-2013-3900-wintrustverifyPowershell script that checks for cert padding in the Windows Registry and adds it if it does not exist. Meant to resolve the WinTrustVerify…
bugbasesecurity/pentest-copilotAI-driven penetration testing agent that connects to a Kali box, autonomously runs security tools, analyzes results, and iterates through…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
seifreed/yaraastA powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation
osirium/sudsClone of suds 0.4 + suds-0.4-CVE-2013-2217.patch
facebookincubator/ttpforgeThe TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).
nousresearch/hermes-agentThe agent that grows with you
airbus-cert/dittoObfuscates PowerShell and JavaScript scripts using tree-sitter-based parsing with multiple configurable impostor profiles for stealth, size, and…
modelcontextprotocol/inspectorInspect, debug, and visually test Model Context Protocol (MCP) servers from a web UI, CLI, or TUI, with tool/resource exploration, request logging,…
