penetration-testing

A collection of various awesome lists for hackers, pentesters and security researchers

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

A collection of hacking / penetration testing resources to make you better!

Automated Penetration Testing Agentic Framework Powered by Large Language Models

A collection of hacking tools, resources and references to practice ethical hacking.

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Web path scanner

🐶 A curated list of Web Security materials and resources.

hydra

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.