#1General-purpose tools, frameworks, and environments supporting various cybersecurity workflows and tasks.
Kitploit recommended
projectdiscovery/pdtmProjectDiscovery's Open Source Tool Manager
openrce/sulleyA pure-python fully automated and unattended fuzzing framework.
qi4l/jysoDual-purpose JNDI injection and Java deserialization exploitation framework with advanced bypass capabilities for WAF, RASP, and high JDK versions.…
mgeeky/packmypayloadA PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…
tylous/sourcepointPolymorphic C2 profile generator for Cobalt Strike that automates creation of evasive beacon configurations with randomized options for HTTP, DNS,…
sleepingbag945/ddddBatch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…
jamesstringer90/appsandboxEasily create full virtual machines that are sandboxed for development or computer use models.
karol-broda/snitcha prettier way to inspect network connections
projectdiscovery/nuclei-burp-pluginBurp Suite plugin for generating and executing Nuclei vulnerability templates directly from HTTP requests and responses, with YAML auto-complete and…
mafifrizi/aresAutonomous red-team engagement platform with MITRE ATT&CK module orchestration, DAG attack-path solving, OPSEC controls, encrypted credential vault,…
portswigger/bambdasBambdas collection for Burp Suite Professional and Community.
trimstray/sandmapNmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
nil0x42/duplicutRemove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
metarget/metargetMetarget is a framework providing automatic constructions of vulnerable infrastructures.
cytopia/pwncatpwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully…
asciimoo/exrexIrregular methods on regular expressions
stormshadow07/hacktheworldAn Python Script For Generating Payloads that Bypasses All Antivirus so far .
