advance-kns-osint-tool #osint
Osint Phone Tracker Tool - Educatinal Purpose. Where We Are?

https://github.com/Kns-g7/advance-kns-osint-tool

toolbox-pentest-web #web
Docker toolbox for pentest of web based application.

https://github.com/righettod/toolbox-pentest-web

BugHunter-AI #pentest
🔍 Automate penetration testing with an AI-driven tool featuring a cyber-inspired GUI and efficient task scheduling for authorized testing environments.

https://github.com/f3m1p0l4r1cguy/BugHunter-AI

Cerberus-FUEF #ad #exploit #web
Cerberus FUEF (File Upload Exploitation Framework) is a professional offensive security tool for discovering, fingerprinting and exploiting insecure file upload features in web apps. It automates f...

https://github.com/CerberusMrX/Cerberus-FUEF

EchoXSS #scanner #web
🕵️♂️ Test for XSS vulnerabilities instantly using a GUI tool that scans URL parameters and forms against thousands of payloads with ease.

https://github.com/wesam00/EchoXSS

odoomap #pentest
https://github.com/kamikazewinner/odoomap/releases

https://github.com/kamikazewinner/odoomap

pentest-report-automator #pentest
Python tool to automate pentest report generation by collecting evidence and building structured Markdown reports.

https://github.com/moetez-ben-abdallah/pentest-report-automator

NetExec #pentest
The Network Execution Tool

https://github.com/Pennyw0rth/NetExec

jira-servicedesk-enum #recon
🛠 Discover and manage Atlassian Jira Service Desk users, check permissions, and trigger signups with this Go tool for security assessments.

https://github.com/landoalva/jira-servicedesk-enum

turbo-attack #pentest
A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.

https://github.com/mytechnotalent/turbo-attack

web3-pentest-tool #web
Study and development of a framework for security analysis against web3 applications

https://github.com/gianlucabassani/web3-pentest-tool

enumeraga #recon
Automatic multiprocess Linux CLI tool that aims for a quick enumeration wrapping pentesting tools.

https://github.com/0x5ubt13/enumeraga

naabu #scanner
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

https://github.com/projectdiscovery/naabu

ReportForge #pentest
ReportForge is a high-performance pentest report generation tool (for now) built with Golang, designed for speed, efficiency, and flexibility. Using HTML and CSS3 for templating, it enables fully c...

https://github.com/itz-d0dgy-2nd/ReportForge

arsenic #pentest
Pentesting tool to automate common op tasks and organize discovered data.

https://github.com/analog-substance/arsenic

GhostBuilder #pentest
🚀 Create and inject secure payloads for various platforms using GhostBuilder, your go-to tool for ethical hacking and penetration testing.

https://github.com/arrozitoa/GhostBuilder

Clickjacking-Exploitation-Report #exploit #web
A detailed penetration testing report covering Clickjacking exploitation techniques across Lab 4 and Lab 5 from PortSwigger Web Security Academy, including PoCs, screenshots, impact analysis, and m...

https://github.com/RBG-00/Clickjacking-Exploitation-Report

CVE-2025-6440-Poc-Exploit #exploit
┌─────────────────────────────────────────┐

https://github.com/m2hcz/CVE-2025-6440-Poc-Exploit

WinRAR-CVE-2025-8088-Exploitation-Toolkit #exploit
bash

https://github.com/xi0onamdev/WinRAR-CVE-2025-8088-Exploitation-Toolkit

CVE-2025-55315 #ad #exploit #scanner #web
Proof-of-concept exploit for CVE-2025-55315 (.NET HTTP Request Smuggling). Demonstrates how improperly parsed chunked encoding lets attackers smuggle requests past proxies and load balancers in vul...

https://github.com/MartinFabianIonut/CVE-2025-55315

Silent-WebStorm-Fortinet-s-Hidden-Exploits #cloud #exploit #web
Fortinet’s FortiWeb flaws CVE‑2025‑64446 and CVE‑2025‑58034 expose critical path traversal and command injection risks. Actively exploited in the wild, they enable admin impersonation and OS comman...

https://github.com/mrk336/Silent-WebStorm-Fortinet-s-Hidden-Exploits