Tools

bishopfox/firecat

Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.

nixwizard/kube-alien

Automated Kubernetes cluster penetration testing tool that exploits misconfigurations in API, Kubelet, etcd, and Dashboard to achieve node takeover…

lightos/panoptic

Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files…

abdulr7mann/hackerenv

Automated penetration testing tool that sweeps IPs, scans ports and vulnerabilities, executes exploits, and provides an interactive shell with…

abacus-group-rto/legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

almandin/fuxploider

File upload vulnerability scanner and exploitation tool.

quentinhardy/msdat

MSDAT: Microsoft SQL Database Attacking Tool

a7vinx/swarm

A modular distributed penetration testing tool.

drk1wi/modlishka

Modlishka. Reverse Proxy.

nescau-ufla/fuzzingtool

Software for fuzzing, used on web application pentestings.

x00byte/putscanner

A tool that identifies writable web directories in Apache Tomcat via HTTP PUT method [CVE-2025-24813]

t3l3machus/toxssin

An XSS exploitation command-line interface and payload generator.

medbenali/cyberscan

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

zakirkun/guardian-cli

Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate…

secdec/adapt

ADAPT is a tool that performs automated Penetration Testing for WebApps.

m8sec/nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through…