Penetration Testing
Showing 36 of 288 projects
A PowerShell framework for offensive security, penetration testing, and red teaming with scripts for all phases.
A free, open-source WordPress security scanner for professionals and site maintainers to test website vulnerabilities.
A comprehensive, curated collection of tools, research, and resources for Android application security analysis and penetration testing.
A comprehensive, curated collection of tools, research, and resources for Android application security analysis and reverse engineering.
A collection of setup scripts to install and manage security research tools for CTFs and binary analysis.
A runtime mobile exploration toolkit powered by Frida for security assessment of iOS and Android apps without jailbreak.
An AI-powered WiFi security auditing tool that uses deep reinforcement learning to optimize capture of WPA handshakes.
The most comprehensive open dictionary of attack patterns, predictable resource locations, and regex for black-box application security testing.
A post-exploitation framework with PowerShell and Python agents for cryptographically secure communications and flexible modules.
A post-exploitation framework with PowerShell and Python agents for security testing and red team operations.
A fast, simple, recursive content discovery tool written in Rust for forced browsing attacks.
A curated collection of interesting, funny, and concerning search queries for Shodan.io to find exposed devices and services.
An automated cyber security platform for adversary emulation, red teaming, and incident response built on the MITRE ATT&CK framework.
An open-source adversary emulation platform that simulates malware attacks to test and improve network security defenses.
A curated list of resources for learning and practicing web application security, including tools, books, courses, and vulnerable labs.
A next-generation web scanner that identifies websites and their technologies using over 1800 plugins with configurable aggression levels.
A modular web application fuzzer that replaces FUZZ keywords with payloads to test parameters, authentication, forms, and directories.
A community-curated collection of payloads, tools, and techniques for bug bounty hunters and security researchers.
Exploits locked computers via USB to hijack internet traffic, steal browser cookies, and install persistent web backdoors using a Raspberry Pi Zero.
A Python extension for GDB that enhances exploit development with colorized displays, security checks, and specialized commands.
A comprehensive, free information security reference covering techniques, tools, tactics, and resources for learning and professional development.
A Python tool for generating custom wordlists by profiling users to guess weak passwords during penetration tests.
A tool for visual inspection of websites across many hosts, providing an overview of HTTP-based attack surfaces.
A Python-based hacking tool for remotely exploiting Android devices via ADB and Metasploit to gain Meterpreter sessions.
An automated penetration testing tool that detects and exploits command injection vulnerabilities in web applications.
A curated list of awesome information security courses, training resources, and hands-on labs for cybersecurity professionals and students.
A modular reconnaissance framework for conducting open source intelligence (OSINT) gathering from web-based sources.
A Python framework to automate the installation and updating of penetration testing tools on Debian/Ubuntu/ArchLinux systems.
A comprehensive cheat sheet and tool collection for mobile application penetration testing, mapped to OWASP Mobile Top 10 risks.
A curated collection of XSS resources including payloads, polyglots, bypass techniques, and tools for security researchers.
A penetration testing tool that discovers and accesses RTSP video surveillance cameras through network scanning and dictionary attacks.
A network poisoning tool that captures authentication credentials by spoofing LLMNR, NBT-NS, and mDNS responses.
An open-source web application security scanner that identifies and exploits 200+ vulnerabilities for developers and penetration testers.
A security testing framework for Android that identifies vulnerabilities by interacting with apps, IPC endpoints, and the OS.
A curated list of free, legal, and safe hacking environments for cybersecurity training and skill development.
A Python script that discovers endpoints and their parameters in JavaScript files for penetration testing and bug hunting.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.