Awesome GitHub RepositoriesPenetration Testing Frameworks

This project is a comprehensive cybersecurity tool collection designed to support security research, penetration testing, and vulnerability assessment. It functions as a unified penetration testing suite, providing a centralized environment where professionals can access a wide range of offensive security utilities to identify system weaknesses and study attack vectors. The platform distinguishes itself through a modular architecture that aggregates disparate security scripts into a single, hierarchical command-line interface. It simplifies the management of these utilities by integrating ext

Strix is an automated security research and vulnerability scanning platform that leverages language models to orchestrate complex security analysis tasks. It functions as a comprehensive framework for penetration testing and continuous security integration, allowing users to embed automated vulnerability research directly into development pipelines or execute it within isolated, containerized environments. The platform distinguishes itself through a multi-agent orchestration engine that coordinates specialized autonomous agents to perform parallel security assessments. By integrating LLM-agno

DVWA is a vulnerable web application sandbox and PHP security training environment. It serves as a deployable penetration testing target and an OWASP Top 10 lab designed for practicing exploits and simulating common web security vulnerabilities. The application allows users to adjust security difficulty levels to match their skill level and toggle between different SQL database engines to test how various systems handle injection attacks. It includes a mechanism to disable authentication, enabling automated security tools to interact directly with the environment. The project provides capabi

fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram

Empire is a command and control framework and post-exploitation toolkit used for network penetration testing. It serves as a centralized platform for coordinating remote agent communication and automating the delivery of security testing payloads to target systems. The project provides a suite of modules for host reconnaissance, lateral movement, and credential harvesting across corporate environments. It functions as a remote administration tool to maintain persistence and execute commands on compromised hosts. The framework incorporates capabilities for agent orchestration and the executio

Commando-VM is a Windows penetration testing distribution and offensive security toolkit. It provides a specialized virtual machine environment loaded with a curated suite of security auditing and exploitation tools designed for red teaming operations. The project facilitates the creation of red team infrastructure and security audit environments. It focuses on windows security auditing and penetration testing to help simulate adversary behavior and identify exploitable security flaws. The environment is established through script-based provisioning and modular toolset deployment. This proce

Nettacker este un framework de testare a penetrării automatizat, conceput pentru a orchestra recunoașterea, scanarea porturilor și detectarea vulnerabilităților. Acesta funcționează ca un instrument de recunoaștere a rețelei și scaner de vulnerabilități care identifică porturile deschise, amprentează serviciile și verifică sistemele împotriva bazelor de date cu defecte de securitate cunoscute. Framework-ul se distinge prin combinarea unui crawler de aplicații web pentru descoperirea căilor ascunse prin fuzzing cu un sistem de gestionare a vulnerabilităților care persistă rezultatele scanării într-o bază de date pentru a urmări evaluările istorice. Include, de asemenea, capabilități specializate pentru enumerarea subdomeniilor, brute forcing-ul credențialelor și capacitatea de a ruta traficul prin proxy-uri pentru anonimizare. Sistemul acoperă o suprafață largă de capabilități de securitate, inclusiv descoperirea activelor de rețea, auditarea serviciilor multi-protocol și auditarea configurațiilor. Suportă scanarea multi-țintă pe intervale IP și blocuri CIDR și oferă instrumente pentru generarea de rapoarte de securitate în formate multiple. Controlul programatic este disponibil printr-o interfață bazată pe REST, permițând integrarea framework-ului în pipeline-uri de securitate și fluxuri de automatizare.

Kube-hunter este un scaner de securitate și un vânător de vulnerabilități pentru clusterele Kubernetes. Acesta operează ca un instrument de penetrare cloud-native conceput pentru a identifica slăbiciunile de securitate, configurațiile greșite ale infrastructurii și lacunele exploatabile prin simularea tehnicilor atacatorilor. Instrumentul se distinge printr-un motor de scanare cu mod dual care execută atât sonde externe la distanță, cât și scanări de rețea interne. Dispune de impersonare bazată pe identitate, permițându-i să utilizeze token-uri de cont de serviciu și identități de pod pentru a simula accesul de securitate din roluri specifice de cluster și a determina potențiala rază de explozie a unui compromis de container. Proiectul acoperă o arie largă de capabilități de evaluare a securității, inclusiv scanarea vulnerabilităților clusterului, maparea topologiei rețelei interne și verificarea conformității. Poate detecta secrete expuse, analiza șabloanele de infrastructură pentru configurații greșite și efectua încercări de exploatare activă pentru a verifica dacă vulnerabilitățile descoperite sunt exploatabile. Aplicația este ambalată ca un executabil independent pentru a elimina dependențele de runtime în timpul implementării.

AntSword is a cross-platform web manager and penetration testing framework designed for the centralized administration of multiple remote website environments. It functions as a remote website administration tool and a web shell management tool, allowing users to organize and control diverse web servers from a single interface. The project provides a toolkit for security researchers to perform authorized security audits and identify vulnerabilities. It supports web penetration testing and security research workflows to analyze web application behavior and discover potential exploits. The sys

Nexphisher is a command-line security utility and social engineering simulation framework designed for capturing credentials during authorized security audits. It functions as a tool for credential harvesting and penetration testing to evaluate organizational resilience against phishing attacks. The system orchestrates the deployment of realistic login pages and integrates network tunneling to expose local web servers to the public internet. This allows for remote security testing and the execution of controlled social engineering simulations. The framework provides capabilities for template

RED_HAWK is a penetration testing framework and reconnaissance suite designed for information gathering and vulnerability assessment. It provides a toolkit for infrastructure reconnaissance, technology stack detection, automated web spidering, and security scanning. The project distinguishes itself through a multi-stage reconnaissance pipeline that maps attack surfaces. This includes DNS-based infrastructure mapping to resolve network layouts and pattern-based detection to identify specific content management systems and server stacks. The system covers a broad range of capabilities includin

WinPwn is a Windows penetration testing framework designed for conducting internal security assessments and privilege escalation. It functions as a suite for Active Directory security auditing, credential extraction, and the execution of privilege escalation scripts. The toolset enables the automation of SMB relay attacks to intercept and reuse authentication hashes. It provides specialized capabilities for retrieving passwords and hashes from system memory, registries, and browsers using obfuscated techniques to avoid detection. The framework covers broad capability areas including domain a

Ethical-Hacking-Labs is a comprehensive cybersecurity training curriculum and lab suite designed for learning penetration testing, network analysis, and offensive security techniques. It provides a structured environment for practicing the full attack lifecycle, from initial reconnaissance and scanning to exploitation and post-compromise analysis. The project provides instructional materials and guided exercises that cover specific technical domains, including open source intelligence research and network security courseware. It includes a practical workbook for identifying system vulnerabili

Nexmon is a suite of operational tools designed for firmware patching, ROM extraction, frame injection, and enabling monitor mode on wireless hardware. It provides utilities to modify wireless chip firmware to unlock low-level hardware capabilities not supported by official drivers. The project enables the activation of monitor mode for capturing raw network packets with radiotap headers and allows for the transmission of custom-crafted wireless frames. It includes tools for dumping the read-only memory of wireless chips to facilitate reverse engineering and analysis of hardware behavior. Th

Lockdoor-Framework este o suită modulară de testare a penetrării concepută pentru a facilita evaluări de securitate cuprinzătoare printr-o interfață centralizată de linie de comandă. Funcționează ca o platformă integrată pentru recunoaștere, scanarea vulnerabilităților și exploatarea sistemelor țintă, oferind un mediu unificat pentru gestionarea fluxurilor de lucru complexe de securitate. Framework-ul se distinge printr-o arhitectură modulară de plugin-uri care permite extinderea capabilităților de bază fără a modifica codebase-ul subiacent. Încorporează un pipeline automatizat de recunoaștere pentru a mapa suprafețele de atac și utilizează integrarea cu instrumente externe pentru a împacheta utilitare standard din industrie, permițând utilizatorilor să execute diverse operațiuni de securitate într-un singur sistem coerent. Instrumentul acoperă o suprafață largă de capabilități, inclusiv analiza binară și ingineria inversă pentru examinarea software-ului compilat, precum și scanarea automatizată a aplicațiilor web pentru a identifica defecte de injecție și erori de configurare. De asemenea, suportă testarea la nivel de sistem, cum ar fi escaladarea privilegiilor și auditarea parolelor, și include un motor dedicat pentru agregarea descoperirilor în rapoarte standardizate de evaluare a securității.