#pentest-tool (30 Repositories)

moonD4rk/HackBrowserData

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

oasm-platform/open-asm

AI-powered open-source platform for Attack Surface Management (OASM)

RAJANAGORI/Nightingale

Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.

Mr-xn/BurpSuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

SamuraiWTF/samuraiwtf

The main SamuraiWTF collaborative distro repo.

b23r0/Heroinn

A cross platform C2/post-exploitation framework.

zakirkun/guardian-cli

Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.

ADScanPro/adscan

Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.

matty69v/Bug-Bounty-Agents

AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes

transilienceai/communitytools

Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research

thewhiteh4t/FinalRecon

All In One Web Recon

D4Vinci/One-Lin3r

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

christophetd/CloudFlair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

s0rg/crawley

The unix-way web crawler

CompassSecurity/EntraFalcon

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.

KKingZero/Zypheron-CLI

ZYPHERON CLI Powerful command-line interface for automated security testing. Integrate ZYPHERON into your DevSecOps pipeline. Get CLI

Eyadkelleh/awesome-skills-security

Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs, and bug bounties

lefayjey/linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

abdulr7mann/hackerEnv

aziz0x48/vMass

vMass Bot :hook: Vulnerability Scanner & Auto Exploiter Tool Written in Perl.

shmuelamar/cracken

a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust

itm4n/PrivescCheck

Privilege Escalation Enumeration Script for Windows

nccgroup/house

A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.

k8gege/PowerLadon

Ladon hacking Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC

Mr-xn/subdomain_shell

一键调用subfinder+ksubdomain+httpx 强强联合 从域名发现-->域名验证-->获取域名标题、状态码以及响应大小 最后保存结果,简化重复操作命令

Red-company/RDDoS_Tool

🔫 Red DDoS Tool is -THE BEST- tool for DDoS attacks.

Lucifer1993/PLtools

整理一些内网常用渗透小工具

Moopinger/smugglefuzz

A rapid HTTP downgrade smuggling scanner written in Go.

HightechSec/git-scanner

A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

Leviathan36/kaboom

A tool to automate penetration tests