Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

awesome-hacking-lists

A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!
https://github.com/taielab/awesome-hacking-lists

Last synced: 28 days ago
JSON representation

Filtered by hacking-tool. Clear filters

Assembly

C

  • m0nad/Diamorphine - LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

C# #

Dockerfile

Go

  • mytechnotalent/turbo-attack - A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.
  • Hackmanit/Web-Cache-Vulnerability-Scanner - Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).
  • FleexSecurity/fleex - Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.
  • edoardottt/lit-bb-hack-tools - Little Bug Bounty & Hacking Tools⚔️
  • JavierOlmedo/ipdiscover - 🔍 A simple tool to obtain long lists of ips from domains using goroutines
  • edoardottt/scilla - Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
  • jm33-m0/emp3r0r - Linux/Windows post-exploitation framework made by linux user
  • knownsec/ksubdomain - 无状态子域名爆破工具
  • Static-Flow/gofingerprint - GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fingerprints.
  • j3ssie/osmedeus - A Workflow Engine for Offensive Security
  • tiagorlampert/CHAOS - 🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
  • intigriti/misconfig-mapper - Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

HTML

Java

  • tiagorlampert/sAINT - 👁️ (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued]

JavaScript

  • guyoung/CaptfEncoder - Captfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscella
  • KuroLabs/stegcloak - Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐
  • evilcos/xssor2 - XSS'OR - Hack with JavaScript.

Objective-C

Others

Perl

PHP

PowerShell

Python

  • Viralmaniar/Powershell-RAT - Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen c
  • LockGit/Hacking - Hacker, ready for more of our story ! 🚀
  • n00py/WPForce - Wordpress Attack Suite
  • MatrixTM/MHDDoS - Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
  • volkandindar/agartha - A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations, while also converting HTTP requests to JavaScript for enhanced
  • v4d1/Dome - Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.
  • s4dhulabs/vimana-framework - Vimana is an experimental security framework that aims to provide resources for auditing Python web applications.
  • r3nt0n/bopscrk - Generate smart and powerful wordlists
  • exbotanical/brutus - extensible exploitation framework shipped on a modular multi-tasking architecture
  • Skiller9090/Lucifer - A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security L
  • the0cp/awesome-ddos-tools - Collection of several DDos tools.
  • D4Vinci/elpscrk - An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
  • edoardottt/longtongue - Customized Password/Passphrase List inputting Target Info
  • bitranox/fingerprint - Monitoring Registry and File Changes in Windows
  • ankit0183/Wifi-Hacking - Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)
  • codingo/NoSQLMap - Automated NoSQL database enumeration and web application exploitation tool.
  • evyatarmeged/Raccoon - A high performance offensive security tool for reconnaissance and vulnerability scanning
  • kelvinBen/AppInfoScanner - 一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
  • fO-000/bluing - An intelligence gathering tool for hacking Bluetooth
  • kurogai/nero-phishing-server - An full HTTP server for Phishing. Downloads recursively the entire webpage.
  • aufzayed/digit - Extract endpoints from specific Git repository for fuzzing
  • codingo/Interlace - Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
  • aydinnyunus/Keylogger - Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
  • Knowledge-Wisdom-Understanding/recon - Enumerate a target Based off of Nmap Results
  • lengjibo/RedTeamTools - 记录自己编写、修改的部分工具
  • SofianeHamlaoui/Lockdoor-Framework - 🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
  • mIcHyAmRaNe/okadminfinder - [ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву 👻 (❤-❤) 👻
  • YagamiiLight/Cerberus - 一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Think
  • jofpin/trape - People tracker on the Internet: OSINT analysis and research tool by Jose Pino
  • SpiderLabs/HostHunter - HostHunter a recon tool for discovering hostnames using OSINT techniques.
  • WangYihang/SourceLeakHacker - 🐛 A multi threads web application source leak scanner
  • D4Vinci/One-Lin3r - Gives you one-liners that aids in penetration testing operations, privilege escalation and more
  • codingo/VHostScan - A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
  • D4Vinci/Dr0p1t-Framework - A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
  • maurosoria/dirsearch - Web path scanner
  • jm33-m0/mec - for mass exploiting
  • pwndbg/pwndbg - Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
  • repoog/GitPrey - Searching sensitive files and contents in GitHub associated to company name or other key words
  • SpoofIMEI/awacs-scanner - Another vulnerability scanner
  • Cyberheroess/Saldiscript - Bypass WAF payload adaptif
  • antoninoLorenzo/AI-OPS - Penetration Testing AI Assistant based on open source LLMs.
  • rtulke/proxyreaper - A powerful proxy checker that checks and evaluates proxies for speed, availability, and anonymity across multiple protocols (HTTP, HTTPS, SOCKS4, SOCKS5).
  • HackfutSec/Detected - Detected : A powerful and user-friendly tool for detecting SQL injection vulnerabilities in web applications, supporting GET/POST requests, custom payloads, cookies, and detailed reporting.
  • mbrg/power-pwn - An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform

Ruby

  • m0nad/HellRaiser - Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Shell

  • x1mdev/ReconPi - ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
  • souravbaghz/Carpunk - The CAN Injection Toolkit
  • ManasHarsh/Cobra - All in one tool to make your hacking easier.
  • 1N3/AttackSurfaceManagement - Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty
  • souravbaghz/RadareEye - Tool for especially scanning nearby devices and execute a given command on its own system while the target device comes in range.
  • jaykali/maskphish - Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.
  • MS-WEB-BN/t14m4t - Automated brute-forcing attack tool.
  • abdulr7mann/hackerEnv
  • ASHWIN990/ADB-Toolkit - ADB-Toolkit V2 for easy ADB tricks with many perks in all one. ENJOY!
  • udit-thakkur/AdvancedKeyHacks - API Key/Token Exploitation Made easy.
  • trimstray/sandmap - Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
  • GONZOsint/WhatCMS - CMS Detection and Exploit Kit based on Whatcms.org API
  • johnnyxmas/ScanCannon - External attack surface discovery, enumeration and reconnaissance for massive networks
  • The-Z-Labs/linux-exploit-suggester - Linux privilege escalation auditing tool
  • 0xapt/awesome-bbht - A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.

Smali