awesome-pentest
enaqx/awesome-pentestA collection of awesome penetration testing resources, tools and other shiny things
osintprivilege-escalationids-ips-evasion+9
26.9k25 days ago
Tools specifically designed to exploit common web application vulnerabilities (e.g., SQL injection, XSS).
enaqx/awesome-pentestA collection of awesome penetration testing resources, tools and other shiny things
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
mr-xn/penetration_testing_poc渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor…
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
infoslack/awesome-web-hackingA list of web application security
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
kgretzky/evilginx2Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…
manisso/fsocietyfsociety Hacking Tools Pack – A Penetration Testing Framework
trustedsec/social-engineer-toolkitThe Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
elder-plinius/t3mp3stautonomous red teaming platform; multi-agent offensive-security meta-harness
fuzzdb-project/fuzzdbDictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
bikini/exploitariumCurated archive of public proof-of-concept exploits and vulnerability research writeups covering web, binary, and network security, with a focus on…
k8gege/k8toolsK8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell…
s0md3v/xsstrikeMost advanced XSS scanner.
lintsinghua/deepauditDeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。