Top #pentest Tools & Software

black-hat-rust

github

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

awesome-pentest-cheat-sheets

github

Collection of the cheat sheets useful for pentesting

kscan

github

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

snoop

github

Snoop — инструмент разведки на основе открытых данных (OSINT world)

awesome-api-security

github

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

pentest-wiki

github

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

OSCP

github

OSCP Cheat Sheet

xunfeng

github

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Pentest-Windows

github

⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips

Ethical-Hacking-Labs

github

Practical Ethical Hacking Labs 🗡🛡

Stowaway

github

👻Stowaway -- Multi-hop Proxy Tool for pentesters

blackarch

github

An ArchLinux based distribution for penetration testers and security researchers.

pentest-tools

github

A collection of custom security tools for quick needs.

awesome-nodejs-security

github

Awesome Node.js Security resources

Penetration-Testing-Tools

github

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

pwndoc

github

Pentest Report Generator

reconspider

github

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

sn0int

github

Semi-automatic OSINT framework and package manager

SSH-Snake

github

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

caido

github

🚀 Caido releases, wiki and roadmap

31-days-of-API-Security-Tips

github

This challenge is Inon Shkedy's 31 days API Security Tips.

goHackTools

github

Hacker tools on Go (Golang)

InternalAllTheThings

github

Active Directory and Internal Pentest Cheatsheets