A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.
Cybersecurity Harness
API Pentesting Tools are specialized security tools used to test and analyze the security of Application Programming Interfaces (APIs).
PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.
Penetration Testing AI Assistant based on open source LLMs.
Moodle community-based vulnerability scanner
Barcha is your Swiss‑Army knife for SQL Injection reconnaissance 🔍. Written in Go, it automates: Shodan enumeration of SSL hosts 🕵️♂️ Liveness & redirect checks (ignores bad certs) 🔄 Automated Ghauri tests for each host 🛡️ SQLite logging of every scan 🔖
Aura-sec is a simple, fast, and extensible network port scanner built with Python. Designed for security professionals, students, and enthusiasts, Aura-sec makes it easy to scan network hosts for open ports and services. The tool is lightweight and user-friendly, making it ideal for both learning and practical network security tasks.
🆘 Precompiled binaries for Ghostpack and other for Windows and Linux.
An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant security tools, and progressive challenges to build real world cybersecurity skills.
An autonomous, AI-powered offensive security framework. DrogonClaw uses an unrestricted ReAct engine to dynamically chain reconnaissance, exploitation, and post-exploitation workflows within isolated, ephemeral sandboxes.
An elite, self-orchestrating cyber-offensive platform built for relentless surface expansion, real-time intelligence gathering, precision vulnerability triage, and automated targeted exploitation.
AI-powered automated penetration testing agent. Finds and exploits vulnerabilities in web apps, WordPress, and REST APIs using Claude AI with Tor routing.
Hunting Pro is a powerful subdomain enumeration and URL extraction tool designed for security professionals.
A collection of awesome penetration testing and offensive cybersecurity resources.
SubTracker is a cross-platform (Linux, Windows, macOS) command-line tool written in Go that discovers subdomains for a given target domain by calling the AgniOps Subdomain Scan API. Users must supply their own API key before any scan can run.
The Advanced Web Vulnerability Scanner is a modular, Python-based tool designed to scan websites for common application layer web vulnerabilities.
A lightweight, fast reconnaissance and web hygiene scanner focused on safe, controlled checks rather than noisy scanning. It analyzes security headers, cookie flags, CORS policy, HTTP methods, TLS certificates, and subdomain takeover risk, with wildcard-DNS-aware host discovery to minimize false
reversync is a secure, asynchronous Python reverse shell framework using SSL and asyncio for remote command execution.
A fast, multi-threaded reconnaissance framework built for bug bounty hunters and penetration testers. It automates the full recon pipeline — subdomain discovery, live host and port detection, URL/JS crawling, secret and endpoint extraction, and common vulnerability indicators
To associate your repository with the penetration-testing-tool topic, visit your repo's landing page and select "manage topics."