pentest-tool

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

ODAT: Oracle Database Attacking Tool

Awesome Pentest Tools Collection

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

Automatic SSTI detection tool with interactive interface

Asset inventory of over 800 public bug bounty programs.

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理

Awesome cloud enumerator

🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.

基于ARL-V2.6.2修改后的版本

:key: Hash type identifier (CLI & lib)

Hacking Toolkit

A literal credit-card sized computer with E-Paper display, ESP32 and NFC.

Subdomain and target enumeration tool built for offensive security testing

HackGPT Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices architecture, and comprehensive security frameworks to deliver professional-grade cybersecurity assessments.

WeirdAAL (AWS Attack Library)

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

JustTryHarder, a cheat sheet which will aid you through the PWK course & the OSCP Exam. (Inspired by PayloadAllTheThings)

Rustcat(rcat) - The modern Port listener and Reverse shell

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

Weakpass collection of tools for bruteforce and hashcracking

A cross platform C2/post-exploitation framework.

Open Redirect Payloads

👻Impost3r -- A linux password thief

Free Active Directory pentesting tool for Linux. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports. No Windows needed.

Overlord - Red Teaming Infrastructure Automation

Fast directory scanning and scraping tool

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.