Kwetsbaarhedenbeheer

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

EMBA - The firmware security analyzer

This repository contains the scanner component for Greenbone Community Edition.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

hydra

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Gather and update all available and newest CVEs with their PoC.

An all-in-one hacking tool to remotely take over Android devices.

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

Open source vulnerability DB and triage service.

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Cameradar hacks its way into RTSP videosurveillance cameras

A collection of various awesome lists for hackers, pentesters and security researchers

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

A list of web application security

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Study Notes For Web Hacking / Web安全学习笔记

AI-powered bug bounty hunting toolkit that works with or without subscription.

Knock Subdomain Scan

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

Open-source AI-powered offensive security harness for automated penetration testing.

802.11 Attack Tool

🧵 CLI tool for directly patching container images!

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.

Mobile Edge-Dynamic Unified Security Analysis

Automatic SSTI detection tool with interactive interface

SSH-MITM - ssh audits made simple

Official repository of the DedSec Project.

A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

A collection of hacking / penetration testing resources to make you better!

An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

A Security Tool for Bug Bounty, Pentest and Red Teaming.

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

Real-world infosec wordlists, updated regularly

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

Awesome Vulnerable Applications

Your ONVIF and RTSP camera companion for discovering and hacking real-world security cameras 🎥

Next generation web scanner

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Directory Services Internals (DSInternals) PowerShell Module and Framework

GUAC aggregates software security metadata into a high fidelity graph database.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.

Fully featured and community-driven hacking environment

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Agentic offensive-security in your terminal

The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Vulnerability Intelligence Platform

OSINT Tool: Generate username lists for companies on LinkedIn

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

Web path scanner

Awesome hacking is an awesome collection of hacking tools.

Hack23 Public Information Security Management System:Security Through Transparency and Open Documentation Demonstrating Security Excellence Through Public ISMS Disclosure

A curated list of awesome infosec courses and training resources.

Automated NoSQL database enumeration and web application exploitation tool.

Open-source security agents for cloud, code and runtime. 45 built-in agents audit AWS, GCP, Azure, Kubernetes, GitHub and GitLab for privilege escalation, public exposure, supply chain and more, or build your own in one markdown file. Live, read-only access to your infrastructure.

🐶 A curated list of Web Security materials and resources.

Obtain GraphQL API schema even if the introspection is disabled

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

OSCP Cheat Sheet

(⌐■_■) - Raspberry Pi instrumenting Bettercap for Wi-Fi pwning.

Bloodhound Reporting for Blue and Purple Teams

Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.

Tools and Techniques for Red Team / Penetration Testing

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

A Modular Penetration Testing Framework

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

A fast tool to scan CRLF vulnerability written in Go

Buildware-Tools is an all-in-one multitool for security research and automation.

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

A script for credentials-based attack surface enumeration and general reconnaissance of massive external networks

Infection Monkey - An open-source adversary emulation platform

Awesome Pentest Tools Collection

Hack the World using Termux

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

A default credential scanner.

Penetration tests guide based on OWASP including test cases, resources and examples.

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

Advanced vulnerability scanning with Nmap NSE

🔪 :octocat: Leak git repositories from misconfigured websites

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Generates millions of keyword-based password mutations in seconds.

Asset inventory of over 800 public bug bounty programs.

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

:new: The Multi-Tool Web Vulnerability Scanner.

ADB-Toolkit V2 for easy ADB tricks with many perks in all one. ENJOY!

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

An XSS exploitation command-line interface and payload generator.

network reconnaissance toolkit

Low bandwidth DoS tool. Slowloris rewrite in Python.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

USB Rubber Ducky type scripts written for the DigiSpark.

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

An advanced tool for email reconnaissance

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Tools for Pentesting

All in One Hacking Tool for Linux & Android (Termux). Make your linux environment into a Hacking Machine. Hackers are welcome in our blog

A compilation of resources in the software supply chain security domain, with emphasis on open source

Notes I took while preparing for eJPT certification by INE Security (passed 19/20, fka eLearn Security)

Security Tool to Look For Interesting Files in S3 Buckets

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Penetration Testing Platform

A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from the web.

All about bug bounty (bypasses, payloads, and etc)

Top 100 Hacking & Security E-Books (Free Download)

⚡️An awesome list of the best Termux hacking tools

A collection of useful commands, scripts and resources for the OSWA (WEB-200) exam of Offensive Security

Practical Ethical Hacking Labs 🗡🛡

A curated list of awesome OSCP resources

Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

This repository is a collection of powershell functions every hacker should know

This repository contains a roadmap for preparing for the EJPTv2 exam.

API Security Project aims to present unique attack & defense methods in API Security field

Rubyfu, where Ruby goes evil!