#ethical-hacking (19 Repositories)
Ranked open-source repositories tagged with #ethical-hacking, scored by pull request acceptance likelihood and maintainer engagement velocity.
25.3%
28.0h
19 repositories tagged #ethical-hacking
berylliumsec/nebula
AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.
xalgorix/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
kaifcodec/user-scanner
🕵️♂️ (2-in-1) Email & Username OSINT suite for deep data extraction just from a single Email/Username. Analyzes 440+ actively maintained scan vectors (170+ email / 270+ username) for security research, investigations, and digital footprinting.
elementalsouls/Claude-BugHunter
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.
shuvonsec/claude-bug-bounty
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
dedsec1121fk/DedSec
Official repository of the DedSec Project.
The-Art-of-Hacking/h4cker
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org
ivan-sincek/android-penetration-testing-cheat-sheet
Work in progress...
EONRaider/Arp-Spoofer
A pure-Python ARP Cache Poisoning (a.k.a "ARP Spoofing") tool
farhanashrafdev/90DaysOfCyberSecurity
This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md
kleiton0x00/XSScope
XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.
0xSteph/pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
BullsEye0/ghost_eye
Ghost Eye Informationgathering Footprinting Scanner and Recon Tool Release. Ghost Eye is an Information Gathering Tool I made in python 3. To run Ghost Eye, it only needs a domain or ip. Ghost Eye can work with any Linux distros if they support Python 3. Author: Jolanda de Koff
netsquare/BrowserBruter
BrowserBruter is a powerful web form fuzzing automation tool designed for web security professionals and penetration testers. This Python-based tool leverages Selenium and Selenium-Wire to automate web form fuzzing, making it easier to identify potential vulnerabilities in web applications.
SrivathsanNayak/ethical-hacking-notes
my notes
ivan-sincek/powershell-reverse-tcp
PowerShell scripts for communicating with a remote host.
sdushantha/dora
Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found
ShanSuharban/termux4all
termux4all is not a project or something. This is some packages that can be used for the development and security purposes on android phone using the termux app itself. The main purpose of this project is to install & setup all the important tools or packages in termux without researching a lot.