pentest-tool

Web path scanner

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

hydra

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

OneForAll是一款功能强大的子域收集工具

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

An all-in-one hacking tool to remotely take over Android devices.

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

The Network Execution Tool

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A high performance offensive security tool for reconnaissance and vulnerability scanning

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Privilege Escalation Enumeration Script for Windows

Automation for internal Windows Penetrationtest / AD-Security

A minimalist command line knowledge base manager

👻Stowaway -- Multi-hop Proxy Tool for pentesters

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

All In One Web Recon

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

SSRF (Server Side Request Forgery) testing resources

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access

Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows while maintaining ethical hacking standards.

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙