#offensive-security (30 Repositories)
Ranked open-source repositories tagged with #offensive-security, scored by pull request acceptance likelihood and maintainer engagement velocity.
29.3%
36.9h
30 repositories tagged #offensive-security
ashirt-ops/ashirt-server
Adversary Simulators High-Fidelity Intelligence and Reporting Toolkit
pensarai/apex
AI-powered offensive security testing using autonomous agents, directly in your terminal.
htrgouvea/spellbook
Framework for rapid development of offensive security tools
Armur-Ai/Pentest-Swarm-AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
InfosecHouse/InfosecHouse
Tools & Resources for Cyber Security Operations
edoardottt/favirecon
Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
Encod3d-Sec/ClaudeBrain
Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian
vectra-ai-research/Halberd
Halberd : Multi-Cloud Agentic Attack Tool
pablosnt/rekono
Offensive security platform that automates attack surface discovery and vulnerability management
praetorian-inc/brutus
Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
deonmenezes/mantishack
Mantis Hack
ivan-sincek/android-penetration-testing-cheat-sheet
Work in progress...
bountyyfi/lonkero
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
0xsyr0/OSCP
OSCP Cheat Sheet
vulnersCom/getsploit
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
cdxiaodong/cain-agent
Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK
JusticeRage/FFM
Freedom Fighting Mode: open source hacking harness
so87/OSCP-PwK
This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.
urbanadventurer/username-anarchy
Username tools for penetration testing
b1nhack/rust-shellcode
windows-rs shellcode loaders
b1tg/rust-windows-shellcode
Windows shellcode development in Rust
0xsyr0/Red-Team-Playbooks
This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.
gh0x0st/Invoke-PSObfuscation
An in-depth approach to obfuscating the individual components of a PowerShell payload whether you're on Windows or Kali Linux.
f1zm0/acheron
indirect syscalls for AV/EDR evasion in Go assembly
BishopFox/rmiscout
RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
fabaff/nix-security-box
Tool set for Information security professionals and all others
safedv/RustiveDump
LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.
ivan-sincek/powershell-reverse-tcp
PowerShell scripts for communicating with a remote host.
pumpbin/pumpbin
🎃 PumpBin is an Implant Generation Platform.