M365-Assess #pentest
Read-only Microsoft 365 security assessment for IT consultants and administrators

https://github.com/Daren9m/M365-Assess

the-agent-sandbox-taxonomy #pentest
An open taxonomy and scoring framework for evaluating AI agent sandboxes: 7 defense layers, 7 threat categories, 3 evaluation dimensions, 20+ "sandboxes" scored.

https://github.com/kajogo777/the-agent-sandbox-taxonomy

bug-hunter #scanner
Adversarial AI bug hunter with auto-fix skill for Claude Code, Cursor, Codex CLI, GitHub Copilot CLI, Kiro CLI, Opencode, Pi Coding Agent, and more. Multi-agent pipeline finds security vulnerabilit...

https://github.com/codexstar69/bug-hunter

adar #ad #osint #recon
Active Directory reconnaissance & attack tool for authorized pentesting — LDAP, Kerberos, user enum, Kerberoasting, AS-REP Roasting, risk scoring. T1–T4 techniques.

https://github.com/cumakurt/adar

Interactive-WebApp-Pentest-Checklist #web
bash

https://github.com/MaLsR6053/Interactive-WebApp-Pentest-Checklist

cve-2025-32433 #exploit
Go PoC for CVE-2025-32433 — unauthenticated RCE in Erlang/OTP SSH.

https://github.com/joshuavanderpoll/cve-2025-32433

msf-cve-2024-46987 #exploit #scanner
Metasploit module to exploit CVE-2024-46987 - an authenticated path traversal vulnerability in Camaleon CMS versions 2.8.0 through 2.8.2 and 2.9.0

https://github.com/bootstrapbool/msf-cve-2024-46987

CVE-2024-51482-Multi-Stage-Surveillance-System-Exploit #exploit
bash

https://github.com/Gh0s7Ops/CVE-2024-51482-Multi-Stage-Surveillance-System-Exploit

Metasploit-Wordpress-Canto-Exploit-RCE #exploit
this is a metasploit exploit module for CVE-2024-25096 and CVE-2023-3452

https://github.com/puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE

CVE-2025-8088 #exploit #scanner
CVE-2025-8088 — Educational proof-of-concept for WinRAR path traversal vulnerability via NTFS Alternate Data Streams (ADS), CVSS 8.4 HIGH, exploited by RomCom APT (Storm-0978), with configurable tr...

https://github.com/Jessica74016/CVE-2025-8088

CVE-2025-60787-MotionEye-RCE #exploit #scanner
Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowin...

https://github.com/Rohitberiwala/CVE-2025-60787-MotionEye-RCE

debsecan-mcp #scanner
Debian Security Scanner MCP Server - inspired from debsecan tool

https://github.com/copyninja/debsecan-mcp

MCPentest #pentest
Free minecraft pentest tool

https://github.com/Zalgo-Dev/MCPentest

RaspShark #pentest
A Portable Ethical Pentesting Multi-Tool For Rpi 0 2W

https://github.com/justdanisss/RaspShark

rebindx #bugbounty #recon #web
Rebindx is a DNS rebinding tool that is specially designed for security research, pentest, and bug bounty. Tool inspiration from: https://github.com/taviso/rbndr

https://github.com/baibhavanand/rebindx

EthicalHackingTools #osint #recon #scanner
This repository, EthicalHackingTools, is a curated collection of scripts and tools designed for security researchers and penetration testers. It serves as a central hub for various utilities used i...

https://github.com/Quincunx33/EthicalHackingTools

reconreplay #ad #bugbounty #recon #scanner
Record browser sessions, replay with payload injection, and detect vulnerabilities automatically. A desktop security testing tool for bug bounty hunters and pentesters.

https://github.com/charnyladaro/reconreplay

sentinel-ai #scanner
Real-time AI safety guardrails for LLM apps. 10 scanners: prompt injection, PII, harmful content, code vulnerabilities, obfuscation detection. Sub-ms latency. Python + TypeScript SDKs. MCP proxy. C...

https://github.com/MaxwellCalkin/sentinel-ai

metin2-hack-github #ad
Free Metin2 hack tool 2026 with auto farm, speed hack, ESP, and HWID bypass. Download Windows app for safe undetectable gameplay enhancement.

https://github.com/bonifacysey9/metin2-hack-github

LLM-Neurosurgery #pentest
A white-box hacking guide: From Google Colab to Qwen3.5

https://github.com/goldengrape/LLM-Neurosurgery