GhostStrike

HEAD Project 2 is LIVE: GhostStrike Fully automated Spring4Shell CVE-2022-22965 + GitLab RCE framework 100% written from scratch • Python • 2025 Features: • Auto listener nc/tmux Modular design spring4shell.py, payloads/ Colorized output + banner Ready for future exploits LFI-to-RCE, Confluence,...

ROADtools

ROADtools R ogue O ffice 365 and A zure active D irectory tools ROADtools is a framework to interact with Azure AD. It consists of a library roadlib with common components, the ROADrecon Azure AD exploration tool and the ROADtools Token eXchange roadtx tool. ROADlib ROADlib is a library that can ...

BoomER

BoomER BoomER is an open source framework, developed in Python. The tool is focused on post-exploitation, with a main objective, the detection and exploitation of local vulnerabilities, as well as the collection of information from a system, such as the installed applications they have. The...

Industrial Security Auditing Framework

Industrial Security Auditing Framework ▄█ ▄████████ ▄████████ ▄████████ ███ ███ ███ ███ ███ ███ ███ ███▌ ███ █▀ ███ ███ ███ █▀ ███▌ ███ ███ ███ ▄███▄▄▄ ███▌ ▀███████████ ▀███████████ ▀▀███▀▀▀ ███ ███ ███ ███ ███ ███ ▄█ ███ ███ ███ ███ █▀ ▄████████▀ ███ █▀ ███ ISAF aims to be a framework that...

wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

nfstream

NFStreamrepo is a multiplatform Python framework providing fast, flexible, and expressive data structures designed to make working with online or offline network data easy and intuitive. It aims to be Python's fundamental high-level building block for doing practical, real-world network flow data...

One-Lin3r

One-Lin3r One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy...

MOSAIC

🎯 MOSAIC — v1.0.0-alpha Behavioral Intelligence Across Platforms A privacy-first, multi-platform framework for behavioral and sociodynamic analysis 📺 Demo 🧭 What is MOSAIC? MOSAIC is not a simple OSINT aggregator. It is a behavioral analysis framework designed to help researchers, analysts, and...

expliot

EXPLIoT Noun: /ɛkˈsplʌɪəti:/ A Framework for security testing and exploiting IoT products and IoT infrastructure. It provides a set of plugins test cases which are used to perform the assessment and can be extended easily with new ones. The name EXPLIoT pronounced expl-aa-yo-tee is a pun on the...

scared

SCAred scared is a side-channel analysis framework maintained by eShard team. Getting started Requirements Scared need python 3.11 , 3.12 or 3.13 and Numpy =2 You can install scared, depending on your setup: from source with pip with conda Install with conda You just have to run: conda install -c...

Aura-State

Aura-State Prove your AI agent is injection-safe, in-spec, and won't act out of bounds — before you ship it. A design-time verifier for LLM agents — not a runtime guardrail. Import your LangGraph / CrewAI / AutoGen / MCP agent and Aura proves five things about the agent you already wrote, then...

AutoWIFI

Wireless penetration testing framework. Automates the full attack chain - recon through exploitation - with a clean terminal interface. Features Multi-vector attacks - WEP ARP replay, fragmentation, chopchop, WPA/WPA2 handshake capture, PMKID, WPS pixie dust, PIN brute force Smart target selectio...

TIDoS-Framework

TIDoS The Offensive Web Application Penetration Testing Framework. IMPORTANT : The new Qt5 interface is complete, but has additional dependencies. Take a look at the updated installation instructions. Highlights :- Here is some light on what the framework is all about: A complete versatile...

expliot

EXPLIoT Noun: /ɛkˈsplʌɪəti:/ A Framework for security testing and exploiting IoT products and IoT infrastructure. It provides a set of plugins test cases which are used to perform the assessment and can be extended easily with new ones. The name EXPLIoT pronounced expl-aa-yo-tee is a pun on the...

SSRFmap

SSRFmap SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to...

StegoForge

🛡️ StegoForge The ultimate hybrid of steganography, digital forensics, and covert communications. ⚡ Quick Launch Standalone Binaries StegoForge is a complex Python framework, but you shouldn't have to deal with broken environments when doing active forensics. We have compiled zero-dependency,...

DigiDuck-Framework

DigiDuck Framework Framework for Digiduck Development Boards running ATTiny85 processors and micronucleus bootloader! alt text Screenshot of DDF Welcome Screen Roadmap: Plan to implement a command for Duckyspark translation within the framework. Requirements: - ATTiny85 or other compatible...

Scrapling

Effortless Web Scraping for the Modern Web -DFE0E5 !OpenClaw Skillhtt...

see

Sandboxed Execution Environment :Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Download: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...