afrog
zan8in/afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.
penetration-testingred-teamingvulnerability-scanners+1
zan8in/afrogA Security Tool for Bug Bounty, Pentest and Red Teaming.
nomi-sec/poc-in-github📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
strozfriedberg/ssh-weak-dhAudits SSH servers for weak Diffie-Hellman key exchange groups by testing multiple client configurations, identifying Logjam-vulnerable endpoints…
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
trickest/cveGather and update all available and newest CVEs with their PoC.
xalgord/xalgorixAutonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
elementalsouls/claude-bughunterA Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24…
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
edoardottt/pphackAdvanced Client-Side Prototype Pollution Scanner
ghosttroops/topTOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.
mandiant/vulnerability-disclosuresCurated repository of vulnerability disclosures from Mandiant, including CVEs discovered through internal research, red team assessments, and wild…
nmap/nmapHigh-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
edoardottt/awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
tencent/ai-infra-guardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.