#1Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
Kitploit recommended
garrytan/gstackUse Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
torvalds/linuxLinux kernel source tree
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
openwrt/openwrtLinux operating system for embedded devices with writable filesystem, package management, and build framework. Enables custom firmware creation for…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
vulhub/vulhubPre-Built Vulnerable Environments Based on Docker-Compose
google/oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
symfony/symfonyThe Symfony PHP framework
certbot/certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
thingsboard/thingsboardOpen-source IoT Platform - Device management, data collection, processing and visualization.
