Open-Awesome
CategoriesAlternativesStacksSelf-HostedExplore
Open-Awesome

© 2026 Open-Awesome. Curated for the developer elite.

TermsPrivacyAboutGitHubRSS
  1. Home
  2. Tags
  3. Penetration Testing

Penetration Testing

288 projects

Showing 36 of 288 projects

fragattacks
fragattacksC

A tool to test Wi-Fi clients and access points for fragmentation and aggregation vulnerabilities affecting all protected Wi-Fi networks.

#vulnerability-testing#penetration-testing#wi-fi-security
Stars1.3k
Forks185
Last commit1 year ago
XSRFProbe
XSRFProbePython

An advanced Cross-Site Request Forgery (CSRF) audit and exploitation toolkit for security testing.

#python-tool#csrf-attacks#owasp
Stars1.3k
Forks219
Last commit1 day ago
Redcloud
RedcloudPython

Automated deployment of red team infrastructure using Docker with a web interface for managing offensive security tools.

#portainer#red-team-infrastructure#pentest
Stars1.3k
Forks205
Last commit3 years ago
Awesome Censys Queries
Awesome Censys QueriesPython

A curated collection of fascinating and bizarre Censys Search queries for discovering exposed devices and services.

#search#iot#censys
Stars1.2k
Forks133
Last commit3 months ago
aws_pwn
aws_pwnPython

A collection of Python scripts for AWS penetration testing, reconnaissance, exploitation, and persistence.

#cloudtrail#aws-security#penetration-testing
Stars1.2k
Forks193
Last commit2 years ago
AndroBugs
AndroBugsPython

An efficient Android vulnerability scanner that finds security issues and missing best practices in APK files.

#mobile-security#apk-analysis#penetration-testing
Stars1.2k
Forks345
Last commit7 years ago
Hash Extender
Hash ExtenderC

A command-line utility for performing hash length extension attacks against vulnerable cryptographic hash functions.

#command-line-tool#penetration-testing#vulnerability-research
Stars1.2k
Forks195
Last commit1 year ago
multitor
multitorShell

A tool to create multiple TOR instances with load-balancing for increased anonymity and distributed traffic.

#haproxy#multi-tor#proxy
Stars1.2k
Forks187
Last commit1 year ago
Androl4b
Androl4b

A virtual machine for Android application security assessment, reverse engineering, and malware analysis.

#security-training#vulnerability-assessment#mobile-security
Stars1.2k
Forks265
Last commit3 years ago
RootTheBox
RootTheBoxPython

A real-time capture the flag (CTF) scoring engine and game manager for cybersecurity wargames.

#team-collaboration#python-application#penetration-testing
Stars1.1k
Forks334
Last commit1 month ago
Damn Insecure Vulnerable Application (DIVA)
Damn Insecure Vulnerable Application (DIVA)Java

An intentionally insecure Android app designed to teach secure coding and penetration testing through hands-on vulnerability challenges.

#secure-coding#security-training#vulnerable-app
Stars1.1k
Forks325
Last commit
bopscrk
bopscrkPython

A Python tool that generates targeted wordlists for security testing by combining personal info, leet transforms, and song lyrics.

#cracking#wordlist-generator#wordlist
Stars1.1k
Forks125
Last commit1 year ago
isf
isfPython

A Python-based exploitation framework for industrial control systems, similar to Metasploit.

#ics-exp#scada#metasploit-alternative
Stars1.1k
Forks301
Last commit2 years ago
SIPVicious
SIPViciousPython

A VoIP security testing toolset for auditing SIP-based systems through scanning, enumeration, and password cracking.

#voip-security#pbx-testing#password-cracker
Stars1.1k
Forks183
Last commit1 month ago
Legion
LegionPython

Legion is a semi-automated network penetration testing framework for discovery, reconnaissance, and exploitation.

#cve-detection#penetration-testing#reconnaissance
Stars1.1k
Forks186
Last commit1 year ago
Awesome Anti Forensics
Awesome Anti ForensicsHTML

A curated list of tools and resources for anti-forensic activities, including data hiding, encryption, steganography, and evidence removal.

#digital-forensics#privacy-tools#penetration-testing
Stars1.0k
Forks104
Last commit
RockYou2021
RockYou2021

A massive 82 billion entry wordlist compiled from multiple password dictionaries for security testing.

#rockyou2021#wordlist-collection#rockyou
Stars1.0k
Forks127
Last commit2 years ago
Android-Exploits
Android-ExploitsHTML

A curated collection of Android exploits, hacking tools, and resources for security research and penetration testing.

#exploit-development#vulnerability-assessment#exploit
Stars989
Forks151
Last commit6 years ago
open an issue
open an issue

A curated list of awesome tools, research, papers, and projects related to password cracking and security.

#wordlist-generator#infosec-resources#wordlist
Stars974
Forks84
Last commit2 months ago
Password Cracking
Password Cracking

A curated collection of tools, research, and resources for password cracking and security auditing.

#wordlist-generator#research-papers#wordlist
Stars974
Forks84
Last commit2 months ago
Penglab
PenglabJupyter Notebook

A Google Colab notebook setup for high-performance hash cracking and penetration testing tools.

#google-colab#ctf-tools#gpu-acceleration
Stars969
Forks143
Last commit2 years ago
CrackQ
CrackQPython

A Python REST API and web GUI for managing Hashcat password cracking jobs in a queuing system.

#reporting#authentication#rest-api
Stars943
Forks104
Last commit1 year ago
Elpscrk
ElpscrkPython

An intelligent wordlist generator for password profiling using permutations and statistics based on target information.

#python-tool#passwords#wordlist-generator
Stars942
Forks135
Last commit1 year ago
HomePWN
HomePWNPython

A modular Python framework for auditing and penetration testing of IoT devices, supporting WiFi, NFC, and BLE technologies.

#iot#wifi-security#vulnerability-assessment
Stars934
Forks143
Last commit3 years ago
Lonkero
LonkeroRust

A professional-grade web security scanner for penetration testing with intelligent, context-aware scanning and proof-based vulnerability detection.

#sql-injection#web-security#security-automation
Stars928
Forks70
Last commit2 days ago
adbsploit
adbsploitPython

A Python-based tool for exploiting and managing Android devices via ADB with capabilities like screen recording, data extraction, and remote control.

#mobile-forensics#python-tool#exploit
Stars896
Forks126
Last commit3 years ago
android app security checklist
android app security checklist

A comprehensive checklist for designing, testing, and releasing secure Android applications based on OWASP standards.

#vulnerability-assessment#mobile-security#owasp-masvs
Stars894
Forks202
Last commit3 years ago
PANIX
PANIXShell

A modular Linux persistence framework for security research, detection engineering, and penetration testing.

#persistence-framework#self-contained-tool#red-teaming
Stars865
Forks100
Last commit3 months ago
Yersinia
YersiniaC

A framework for performing and analyzing layer 2 network protocol attacks, including STP and CDP.

#cdp-attacks#stp-attacks#layer-2-attacks
Stars848
Forks140
Last commit2 years ago
ebpfkit
ebpfkitC

A rootkit that leverages eBPF to implement offensive security techniques like container breakouts, network scanning, and RASP bypass.

#container-security#runtime-security#obfuscation
Stars847
Forks96
Last commit3 years ago
Killerbee
KillerbeeC

A Python framework and toolkit for security testing and auditing of ZigBee and IEEE 802.15.4 networks.

#radio-frequency#penetration-testing#wireless-security
Stars842
Forks228
Last commit2 years ago
raven
ravenGo

A LinkedIn information gathering tool for penetration testers to collect employee data from organizations.

#linkedin-scraping#osint#chromedriver
Stars797
Forks162
Last commit6 years ago
ebowla
ebowlaPython

Framework for creating environmental keyed payloads that only execute on specific target systems.

#malware-development#memorymodule#evasion-techniques
Stars764
Forks170
Last commit7 years ago
Ronin
RoninRuby

A free and open-source Ruby toolkit for security research and development, featuring CLI commands and libraries for encoding, networking, exploits, and more.

#exploit-development#orm#database
Stars747
Forks59
Last commit4 months ago
Oversecured Vulnerable Android App (OVAA)
Oversecured Vulnerable Android App (OVAA)Java

A vulnerable Android app aggregating known security vulnerabilities for testing and educational purposes.

#app-security#mobile-security#vulnerable-android-apps
Stars745
Forks198
Last commit
onesixtyone
onesixtyoneC

A fast, efficient SNMP scanner that sends requests in parallel and logs responses, unlike traditional sequential scanners.

#network-inventory#udp-scanning#network-discovery
Stars703
Forks101
Last commit9 months ago
PreviousPage 5 of 8

Related Tags

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a projectStar on GitHub
3 years ago
2 years ago
1 year ago
Next
#Security Tools69
#Security66
#Cybersecurity53
#Web Security46
#Network Security46
#Python41
#Hacking41
#Password Cracking40
#Security Testing37
#Security Tool37
#Docker37
#Security Research34