Free
ExploitDB
Insights on Red Teaming for Pacific Rim CCDC 2016 competition, focusing on preparation, operations plan, and automation.
Offensive Security
Offensive security testing uncovers vulnerabilities through simulated attacks.
Try these 279 AI Offensive Security Tools
Free
external_c2 framework
Sublist3r is a python tool for enumerating subdomains using OSINT and various search engines.
Free
ezXSS
Back-end component for red team operations with crucial design considerations.
Free
FDsploit
A macOS Initial Access Payload Generator for penetration testing and red teaming exercises.
Free
Finshir
A Ruby framework designed to aid in the penetration testing of WordPress systems.
Free
FOCA (Fingerprinting Organizations with Collected Archives)
A command that builds and executes command lines from standard input, allowing for the execution of commands with multiple arguments.
Free
GadgetToJScript
A post-exploitation framework designed to operate covertly on heavily monitored environments.
Free
Gato
A digital archive of the internet, allowing users to capture and browse archived web pages.
Free
GCPBucketBrute
SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.
Free
GEF (pronounced ʤɛf - 'Jeff')
Abusing SCF files to gather user hashes from an unauthenticated writable Windows-based file share.
Free
GitHub Actions Attack Diagram
PwnAuth is an open-source tool for generating and managing authentication tokens for penetration testing and red teaming exercises.
Free
Free
GraphQLmap
Rip web accessible (distributed) version control systems: SVN, GIT, Mercurial/hg, bzr, ...
Free
GraphSpy
A DNS rebinding attack framework for security researchers and penetration testers.
Free
Grendel-Scan
Collection of penetration testing scripts for AWS with a focus on reconnaissance.
Free
Habu Hacking Toolkit
A wargaming network for penetration testers to practice their skills in a realistic environment.
Free
hakrawler
BeEF is a specialized penetration testing tool for exploiting web browser vulnerabilities to assess security.
Free
Harpoon
A scripting engine for interacting with GraphQL endpoints for pentesting purposes.
Free
Free
httprebind
SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.