CrossC2

CrossC2 framework README | 中文文档 | READMEFULL | 中文完整文档 CobaltStrike support Support CobaltStrike's security assessment of other platforms Linux/MacOS/..., and include the development support of Unix post-penetration module | CS3.14bug fixes| CS4.0| CS4.X 4.14.8 ---|---|---|--- Master branch| ✅| |...

gallia

Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Acting as a generic interface, the logging functionality...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

threatest

Threatest Threatest is a CLI and Go framework for testing threat detection end-to-end. Threatest allows you to detonate an attack technique, and verify that the alert you expect was generated in your favorite security platform. Read the announcement blog post:...

beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

raptor

╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══██╗ ║ ║ ██║ ██║█...

mallet

Mallet, a framework for creating proxies Mallet is a tool for creating proxies for arbitrary protocols, along similar lines to the familiar intercepting web proxies, just more generic. It is built upon the Netty framework, and relies heavily on the Netty pipeline concept, which allows the graphic...

pypacker

General information This is Pypacker: The fastest and simplest low-level packet manipulation library for Python. See below examples for what you can do with it. If you want to support this project you can via PayPal. What you can do with Pypacker Create custom Packets via keywords or from raw byt...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

Aura-State

Aura-State Prove your AI agent is injection-safe, in-spec, and won't act out of bounds — before you ship it. A design-time verifier for LLM agents — not a runtime guardrail. Import your LangGraph / CrewAI / AutoGen / MCP agent and Aura proves five things about the agent you already wrote, then...

honeyprompt

honeyprompt Introducing honeyprompt, an LLM-first deception framework made by/for web developers. The personal passion project of @alectrocute. Supports all major cloud and local LLM providers. SSH, HTTP, TLS, TCP, telnet and more. It ships as a small container and a single static binary and keep...

LHF

Codacy Badge This has been only tested on the newest Kali Linux Distro LHF: Low Hanging Fruit a recon tool for penetration testing To install dependencies: ./Install.sh To start: ./LHF.py + Checking permissions - Rockyou wordlist is missing trying to decompress... + Rockyou wordlist is...

PowerZure

For a list of functions, their usage, and more, check out https://powerzure.readthedocs.io What is PowerZure? PowerZure is a PowerShell project created to assess and exploit resources within Microsoft’s cloud platform, Azure. PowerZure was created out of the need for a framework that can both...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

frieren

Frieren: The micro-framework for security gadgets Description Frieren is a framework for running security tools on OpenWrt routers and Single Board Computers SBCs. It provides a web panel with WiFi management, installable modules, an integrated terminal, and a package manager. The stack is a PHP...

-Pegasus-Suite

Pegasus-Suite A comprehensive security toolkit with 1000+ penetration testing and security assessment tools. Author Letda Kes Dr. Sobri, S.Kom. Contact: [email protected] GitHub: github.com/sobri3195 Overview Pegasus-Suite is an all-in-one cybersecurity framework designed for security...

MalvexC2

!WARNING Work in Progress: This is a WIP side project that is incomplete and insecure! It is only meant to be used as a playground for myself !CAUTION Use at your own risk: Code in this repository might be harmful. Only run and use things you understand! Malvex C2 Welcome to the repository of the...