The following include a list of pentest tools available across the web. Many are free and even open source, others are premium tools and require a monthly or yearly subscription. We’ll note when pentest tools aren’t free.
☆68Jul 9, 2026Updated last month
Alternatives and similar repositories for ultimate-pentest-tools-list
Users that are interested in ultimate-pentest-tools-list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated collection of YARA rules and structured JSON reports designed to identify and analyze various malware builder variants, for edu…☆17Sep 1, 2025Updated 11 months ago
- A collection of awesome penetration testing resources, tools and other shiny things☆13Sep 23, 2019Updated 6 years ago
- ☆37May 27, 2026Updated 2 months ago
- Method of finding interesting domains using keywords + JARMs☆13Jan 30, 2023Updated 3 years ago
- Fuzz 403/401ing endpoints for bypasses☆12Aug 14, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆47Updated this week
- ☆21Dec 29, 2024Updated last year
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- Slide deck for DEF CON 30 - Read Team Village - Offensive Wireless Security presentation☆14Aug 16, 2022Updated 4 years ago
- ☆11Feb 19, 2019Updated 7 years ago
- Output the SSH private key to the correct Open SSH format for use☆10Nov 3, 2024Updated last year
- The ultimate pentesting companion. Keep all your pentesting artifacts in one place.☆68Jul 27, 2026Updated 3 weeks ago
- Golang CLI binary used for installing and managing Ghostwriter☆21Jul 1, 2026Updated last month
- EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.☆63May 31, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A tool for deploying a forward proxy in your Yandex Cloud infrastructure to change your IP address (almost) each request.☆24Jan 8, 2026Updated 7 months ago
- OSINT Toolkit – Wayback Collector & URL Checker☆22Nov 13, 2025Updated 9 months ago
- This repository has all the writeups and walkthroughs of machines and Labs from INE that I solved during my Exam Preps.☆20Oct 3, 2024Updated last year
- A curated list of awesome ATM hacking resources.☆25Dec 4, 2025Updated 8 months ago
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆25Jun 12, 2023Updated 3 years ago
- An ongoing collection of awesome penetration testing (pentest) tools, software, libraries, learning tutorials, frameworks, academic and p…☆27Jun 29, 2026Updated last month
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆31Oct 21, 2025Updated 9 months ago
- Automated Phishing Tool☆13Aug 25, 2020Updated 5 years ago
- Tiny theme manager for Plymouth bootsplash☆14Apr 2, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Node.js video proxy server example☆14Nov 25, 2018Updated 7 years ago
- MegaMedusa is DDoS tool using nodejs that can bypass many security including captcha. MegaMedusa made by TrashDono & RipperSec Team.☆16Apr 23, 2024Updated 2 years ago
- Implementation of USENIX'2024 paper "Racing for TLS Certificate Validation: A Hijacker’s Guide to the Android TLS Galaxy"☆19Apr 4, 2024Updated 2 years ago
- A comprehensive Burp Suite Professional extension providing MCP server functionality for AI-powered security testing with AI Agents☆29Jul 21, 2026Updated 3 weeks ago
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated last month
- ☆14Nov 8, 2024Updated last year
- This clientsided chatbot with multiple commands uses OpenAI's and Discord's APIs to participate in server channels in real time.☆12Jan 5, 2023Updated 3 years ago
- Official API Documentation☆34Updated this week
- pinterest clone application☆13Mar 30, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Ruby Oracle Security Scanner☆16Jul 9, 2012Updated 14 years ago
- Mobile attack vectors - as observed in malwares and apps.☆18May 5, 2026Updated 3 months ago
- Python3 Reverse Shell☆13May 24, 2019Updated 7 years ago
- ☆16Dec 13, 2022Updated 3 years ago
- An example of a mis-configured Rails application release under MIT license.☆21Jan 19, 2023Updated 3 years ago
- Track IP Location☆11Dec 23, 2018Updated 7 years ago
- A URL Shortner☆10Jul 11, 2015Updated 11 years ago