一站式渗透测试与红队工具合集，旨在帮助渗透测试人员打造自己的工具链
☆59Apr 14, 2026Updated 3 months ago
Alternatives and similar repositories for Awesome_Pentest_Tools
Users that are interested in Awesome_Pentest_Tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个多源漏洞情报聚合工具，能够从多个权威安全数据源爬取漏洞信息，去重后生成结构化报告。支持自定义时间范围查询、多格式输出和自动化定时任务。☆39Updated this week
- 开源项目，所有项目仅供参考学习，禁止用于任何违法行为，任何违法行为需使用者本人自己承担相应法律责任。☆84Jan 17, 2026Updated 5 months ago
- 承影用的 nuclei 漏扫模板☆14Jun 11, 2023Updated 3 years ago
- ☆15Jan 1, 2026Updated 6 months ago
- DTGO (灯塔狩猎者) 是一个用于批量管理和监控资产灯塔系统任务的图形化工具。它能够自动发现灯塔系统、批量提交任务、监控任务状态，并支持导出任务结果。☆37Feb 10, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- XingFinger 是一款高效的 Web 指纹识别工具，基于 chainreactors/fingers 多指纹库聚合引擎，帮助安全人员快速识别目标系统的技术栈。☆57Mar 7, 2026Updated 4 months ago
- LogTrawl 是一个基于 Wails v2 框架开发的现代化桌面 日志分析工具，提供强大的日志查看、搜索、过滤和分析功能。☆84Oct 8, 2025Updated 9 months ago
- 一个功能强大的浏览器扩展程序，专门用于检测Web系统中的权限越权漏洞，适用于Web渗透测试。☆44Oct 11, 2025Updated 9 months ago
- 泛查询漏洞扫描Burp插件☆28Jun 26, 2026Updated 2 weeks ago
- 三Ai网络黑客攻击利器，采用主LLM+顾问LLM+工具LLM结合，并采用可修改式回答，实时参与ai信息链减少ai幻觉，提高准确度。☆30May 12, 2026Updated 2 months ago
- (目前功能可能存在bug，正在不断完善功能中)黄油曲奇是一款集成化渗透测试浏览器插件，专为安全测试人员和开发者设计。它提供了丰富的安全测试工具，包括信息收集、XSS测试、SQL注入测试、端点安全扫描、Shodan主机信息查询以及多种辅助工具，帮助用户快速识别和评估Web应用…☆92Jun 17, 2026Updated 3 weeks ago
- CyberPoC 是一个现代化的网络安全练习和竞赛平台，支持容器化部署的安全挑战，为用户提供实践网络安全技能的环境。☆69Sep 7, 2025Updated 10 months ago
- 基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件☆176Mar 2, 2025Updated last year
- 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun …☆552May 24, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 潜影【TraceHarvest】是一款面向网络安全攻防演练场景的自动化信息收集工具。它通过智能化的多引擎搜索和敏感信息提取技术，解决了在大规模目标侦察过程中人工搜索效率低下、信息遗漏严重、重复工作繁多的核心痛点。☆40May 25, 2026Updated last month
- 基于kimi-cli二次开发的针对CTF竞赛的专用Agent☆57Dec 3, 2025Updated 7 months ago
- ☆21Apr 19, 2025Updated last year
- 渗透测试目录扫描字典☆69Mar 18, 2026Updated 3 months ago
- api接口测试工具,包括swagger文档，asp接口文档,wsdl接口,wadl接口,一键自动跑接口☆167Mar 30, 2026Updated 3 months ago
- Android 应用安全漏洞自动检测系统☆18Jun 15, 2026Updated 3 weeks ago
- [VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本，端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具，批量快速检测网站安全隐患。An open-source, cross-platform websit…☆346Mar 10, 2026Updated 4 months ago
- 各端、平台快速消息通知程序，支持配置文件形式或API调用☆32Oct 22, 2024Updated last year
- ☆65Oct 24, 2025Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 人工流量分析辅助脚本☆12Jul 4, 2019Updated 7 years ago
- A C# CLI tool for reading and modifying AD-Integrated DNS records over LDAP, built for serious red teaming and packed with tradecraft fea…☆20Jun 4, 2026Updated last month
- 基于 Claude Code 的自动化渗透测试 Agent，目标是达到中高级网络安全专家水平。☆47Apr 18, 2026Updated 2 months ago
- USB键鼠流量分析工具Gui☆26Aug 8, 2023Updated 2 years ago
- 群众自发☆11Jun 18, 2025Updated last year
- Official Writeup of SUCTF 2025☆67Feb 25, 2025Updated last year
- [USENIX Security '25] My ZIP isn’t your ZIP: Identifying and Exploiting Semantic Gaps Between ZIP Parsers☆39Mar 20, 2026Updated 3 months ago
- GoLang sys全端口扫描☆13Jan 25, 2022Updated 4 years ago
- 一个用于web框架、CDN和CMS指纹识别的高性能命令行工具。A high-performance command-line tool for web framework, CDN and CMS fingerprinting.☆321Apr 9, 2026Updated 3 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- cmd tools for AWD☆14Jun 10, 2023Updated 3 years ago
- Catcher(捕手) 重点系统指纹漏洞验证工具，适用于外网打点，资产梳理漏洞检查。☆317Feb 18, 2025Updated last year
- 💬 🚀 告别繁琐命令行，用自然语言驱动专业级渗透测试。 ⚡ 让安全测试从未如此简单、高效。Forget complex command lines. 🛡️ Professional penetration testing, powered by natural lan…☆249Jun 4, 2026Updated last month
- ICP_FLASK_YOLOY11是一个基于深度学习的目标检测和图像比对系统，结合了YOLOv11（YOLO系列目标检测）和Siamese网络（图像相似度比对）技术，开发的关于 ICP 域名查询的api接口。。该项目通过深度学习识别验证码，可以自完成验证码的绕过，从而查询域…☆18Jan 30, 2025Updated last year
- arl_files备份项目☆24May 17, 2024Updated 2 years ago
- Holistic Concolic Execution for Dynamic Web Applications via Symbolic Interpreter Analysis (IEEE S&P 2024)☆17Oct 3, 2024Updated last year
- A hybrid analysis framework to aid in uncovering deserialization vulnerabilities☆15Oct 13, 2024Updated last year