Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities bef…

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

The recursive internet scanner for hackers. 🧡

Check subdomains for subdomain takeovers and other DNS tomfoolery

Test your prompts, agents, and RAGs. AI Red teaming, pentesting, and vulnerability scanning for LLMs. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with co…

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

A library for detecting known secrets across many web frameworks

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

PowerShell scripts for alternative SharpHound enumeration, including users, groups, computers, and certificates, using the ActiveDirectory module (ADWS) or System.DirectoryServices class (LDAP).

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.

😱 A curated list of amazingly awesome OSINT

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, co…

Quickly discover exposed hosts on the internet using multiple search engines.

Public Repo for Atomic Test Harness

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

🕵️‍♂️ All-in-one OSINT tool for analysing any website

The FLARE team's open-source tool to identify capabilities in executable files.

A collaborative, multi-platform, red teaming framework

Web browser forensics for Google Chrome/Chromium

Collaborative forensic timeline analysis

UPX - the Ultimate Packer for eXecutables

You can find links to data acquisition websites.

This map lists the essential techniques to bypass anti-virus and EDR

Adversary Emulation Framework

Situational Awareness commands implemented using Beacon Object Files

A curated list of cybersecurity tools and resources.