Lists (32)
Active Directory Security
Repos regarding Active Directory security/offensive tools for red teaming AD.24 repositories
AI/ML 🤖
95 repositories
Blue Team 📘
11 repositories
C2 Tools/Infrastructure 📡
Repos for C2 infrastructure and C2 tools.22 repositories
CLI 🖥️
CLI tools and repos13 repositories
Cloud Security/Pentesting ☁️
13 repositories
CobaltStrike
CobaltStrike Repos46 repositories
CRTO 🔴 ⚔️
Repos related to Zero-Point Security CRTO course for Red Team Operator 1 certification2 repositories
Docker Security 🐳
3 repositories
Domain Security
Tools regarding the security of domains, domain spoofing, subdomain takeover, etc.3 repositories
Google Cloud Security
4 repositories
Homelab/FOSS 🏠
Projects relating to homelab, infrastructure, or FOSS alternatives2 repositories
Host Enumeration & PrivEsc 🔍
Repos related to host enumeration, host recon, and PrivEsc.1 repository
Kerberos 🐶
Repos related to Kerberos attack/defense/management1 repository
Linux 🐧
3 repositories
Ludus 🏟
Ludus related repos5 repositories
MalDev 👾
Malware development related stuff29 repositories
Markdown Ⓜ️
Repos regarding Markdown and markdown tools.6 repositories
NTLM Relaying & Forced Auth
Tools for NTLM relaying and forcing auth3 repositories
Offsenive C#/.NET
Repos for offensive tooling in C# or .NET10 repositories
OSINT 🕵️
A collection of repos for OSINT!26 repositories
Password Attacks 🗝️
Repos related to password attacks, such as password spraying.5 repositories
Persistence 💾
Repos relating to establishing/maintaining persistence on compromised hosts.2 repositories
Phishing 🎣
Repos to aid in phishing.11 repositories
PowerShell
Repos relating to PowerShell (Modules, Tools, Scripts, etc.)6 repositories
Proxy & Port Forwarding
Repos and tools for proxying and port forwarding!2 repositories
Red Team 🚩
381 repositories
Rust 🦀
Repos related to Rust20 repositories
Subdomain Enumeration & Hacking
2 repositories
Web App 🕸️
Web App related repositories1 repository
Wordlists 📖
Collection of wordlists for password cracking, fuzzing, content discovery, username enumeration, etc.2 repositories
ZSH
Repos related to ZSH (Themes, plugins, etc.)2 repositories
Starred repositories
A curated collection of AI agent research papers released in 2026, covering agent engineering, memory, evaluation, workflows, and autonomous systems.
A simple, decentralized mesh VPN with WireGuard support.
Command-line tool to scan Google search results for vulnerabilities
A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (Draugr)
Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass
CyberStrikeAI is an AI-native security testing platform built in Go. It integrates 100+ security tools, an intelligent orchestration engine, role-based testing with predefined security roles, a ski…
Morpheus is an lsass stealer that extracts lsass.exe in RAM and exfiltrates it via forged and crypted NTP packets. For authorized testing only!
practice made claude perfect
Send a phone call from AI agent, in an API call. Or, directly call the bot from the configured phone number!
Erebus is an Initial Access wrapper for the Mythic Command & Control Server. It converts existing Mythic shellcode into payloads specifically used for phishing and IA operations.
Eigent: The Open Source Cowork Desktop to Unlock Your Exceptional Productivity.
Analyze secretsdump output and hashcat potfiles to find shared passwords and weak credentials in Active Directory
Calling the undocumented DPAPI RPC interface directly, no more calling public CryptUnprotectData!
Visualize, collaborate, and evolve the software architecture with always actual and live diagrams from your code
Dump LSASS via physical memory read primitives in vulnerable kernel drivers
Guardian is a production-ready AI-powered penetration testing automation CLI tool that leverages Google Gemini and LangChain to orchestrate intelligent, step-by-step penetration testing workflows w…
Sandboxed devcontainer for running Claude Code in bypass mode safely. Built for security audits and untrusted code review.
Tool that gathers a customizable set of ETW telemetry and generates user-defined detections
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…
Leantime is a goals focused project management system for non-project managers. Building with ADHD, Autism, and dyslexia in mind.
PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.