Archived
vulnreport
salesforce/vulnreportOpen-source pentesting management and automation platform by Salesforce Product Security
devsecopspenetration-testingpenetration-testing-frameworks+2
salesforce/vulnreportOpen-source pentesting management and automation platform by Salesforce Product Security
infobyte/faradayOpen-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin…
matank001/moxyMoxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities…
t3l3machus/villainVillain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with…
archerysec/archerysecASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
s1n6h/pentest-harnessSelf-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Plugin-based, multi-provider LLM support with local…
t3l3machus/psudohashGenerates millions of keyword-based password mutations in seconds.
alirezaparsi/copgAdvanced per-app device / CPU / GPU spoofer for rooted Android — device profiles, per-app CPU models, prop & Android-ID spoofing, all driven by a…
droid-ash/finalrun-agentAI-driven CLI for testing Android and iOS apps using natural language. Generates, runs, and fixes end-to-end tests on emulators/simulators with…
t3l3machus/eviltreeA python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those…
voukatas/commanderPython-based command and control framework with encrypted TLS communication, multiple agent support (Python/C), interactive sessions, file transfer,…
novoda/gradle-static-analysis-pluginEasy setup of static analysis tools for Android and Java projects.
soxoj/maigret🕵️♂️ Collect a dossier on a person by username from 6K websites
spiderlabs/hosthunterHostHunter a recon tool for discovering hostnames using OSINT techniques.
commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
infosecn1nja/red-teaming-toolkitThis repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
cervantessec/cervantesOpen-source collaborative platform for pentesters and red teams to manage projects, clients, vulnerabilities, and generate OWASP-compliant reports…