一站式渗透测试与红队工具合集，旨在帮助渗透测试人员打造自己的工具链
☆66Oct 26, 2026Updated this week
Alternatives and similar repositories for Awesome_Pentest_Tools
Users that are interested in Awesome_Pentest_Tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 拥有数据包语义化分析的参数编辑器☆12Mar 24, 2026Updated 7 months ago
- 整个项目都为 Vibe coding开发，plan和task都包含在项目中，为你的 Agent 提供 Kali 武器库。内置安全工具、反弹 Shell 终端支持，并通过 MCP 协议实现自主工程化。☆16Mar 2, 2026Updated 7 months ago
- a tool for patchelf☆20May 7, 2024Updated 2 years ago
- 承影用的 nuclei 漏扫模板☆15Jun 11, 2023Updated 3 years ago
- ☆18Jan 1, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Android 应用安全漏洞自动检测系统☆34Jun 15, 2026Updated 4 months ago
- A ToB solution for flexibly detecting prompt injection risks across diverse open/closed AI infrastructure and packaged APIs.☆19Jun 26, 2025Updated last year
- Finger 是一款专为 Burp Suite 打造的模块化指纹识别插件，旨在通过被动流量监控与智能主动探测，快速识别目标站点的技术栈（CMS、框架、中间件、API 接口及敏感路径泄露）☆30Apr 13, 2026Updated 6 months ago
- DTGO (灯塔狩猎者) 是一个用于批量管理和监控资产灯塔系统任务的图形化工具。它能够自动发现灯塔系统、批量提交任务、监控任务状态，并支持导出任务结果。☆36Feb 10, 2025Updated last year
- 基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件☆179Mar 2, 2025Updated last year
- vshell 是一款安全对抗模拟、红队工具。提供隧道代理和隐蔽通道，模拟长期潜伏攻击者的策略和技术☆10Mar 25, 2024Updated 2 years ago
- Hacking GraalVM Espresso - Abusing Continuation API to Make ROP-like Attack☆36Aug 27, 2025Updated last year
- 开源项目，所有项目仅供参考学习，禁止用于任何违法行为，任何违法行为需使用者本人自己承担相应法律责任。☆95Jan 17, 2026Updated 9 months ago
- 一款面向SRC漏洞挖掘中，页面信息收集场景的浏览器扩展，自动收集页面及相关资源中的敏感信息与可疑线索，支持基础扫描、深度递归扫描、批量 API 测试及结果导出与自定义正则配置☆692Sep 16, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆24Jul 2, 2024Updated 2 years ago
- 一个用于web框架、CDN和CMS指纹识别的高性能命令行工具。A high-performance command-line tool for web framework, CDN and CMS fingerprinting.☆332Jul 16, 2026Updated 3 months ago
- 一个多源漏洞情报聚合工具，能够从多个权威安全数据源爬取漏洞信息，去重后生成结构化报告。支持自定义时间范围查询、多格式输出和自动化定时 任务。☆54Updated this week
- 泛查询漏洞扫描Burp插件☆28Jun 26, 2026Updated 4 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- The first browser MCP built for security testing. Give your AI agent a real Firefox browser and let it find vulnerabilities.☆25Mar 14, 2026Updated 7 months ago
- 一款轻量级 Burp Suite 被动扫描探测SQLi XSS SSTI漏洞插件☆90Mar 18, 2026Updated 7 months ago
- 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。☆1,207Updated this week
- 集成多种攻防技术与检测手段，帮助安全测试人员高效执行信息收集、漏洞挖掘、利用验证， 提升渗透测试的自动化与体系化水平，为安全团队快速发现潜在风险与攻 击面提供有力支持。☆37Jun 15, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆15Mar 14, 2026Updated 7 months ago
- 使用golang重写开源工具wafw00f☆47Feb 25, 2021Updated 5 years ago
- afrog poc辅助生成yaml工具☆23May 12, 2026Updated 5 months ago
- My presentation slides☆18Oct 31, 2025Updated last year
- 人工流量分析辅助脚本☆12Jul 4, 2019Updated 7 years ago
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆648May 24, 2026Updated 5 months ago
- LogTrawl 是一个基于 Wails v2 框架开发的现代化桌面日志分析工具，提供强大的日志查看、搜索、过滤和分析功能。☆85Oct 8, 2025Updated last year
- AegisX 是一款基于 **LangGraph** 和 **LLM (大语言模型)** 构建的下一代 Web 安全自动化渗透测试代理系统。它通过多智能体协作（Multi-Agent Collaboration）和反馈驱动的策略进化，模拟资深安全专家的思维逻辑，对目标进行深…☆21Jan 21, 2026Updated 9 months ago
- 各端、平台快速消息通知程序，支持配置文件形式或API调用☆32Oct 22, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Enhanced Evasion for Threadless Injections☆15May 29, 2026Updated 5 months ago
- 哪吒网络安全是一款高性能终端 UI (TUI) 应用，专为从事红队演练、渗透测试和漏洞研究的网络安全专业人员打造。本应用作为智能指挥控制界面，利用 DeepSeek 大语言模型提供实时流式对话、基于函数调用 (Function Calling) 的自动化工具编排，以及多智能…☆24Updated this week
- 备份的漏洞库，3月开始我们来维护☆2,257Oct 20, 2026Updated last week
- ☆11Sep 2, 2024Updated 2 years ago
- arl_files备份项目☆23May 17, 2024Updated 2 years ago
- 💬 🚀 告别繁琐命令行，用自然语言驱动专业级渗透测试。 ⚡ 让安全测试从未如此简单、高效。Forget complex command lines. 🛡️ Professional penetration testing, powered by natural lan…☆351Jun 4, 2026Updated 4 months ago
- 一个学校电费的爬虫项目，用于爬取并展示本学校各个宿舍各个时间的电费情况，了解用电规律。☆12Apr 18, 2023Updated 3 years ago