Redteam

T3MP3ST is an autonomous multi-agent offensive security framework that integrates with existing AI coding agents (Claude, Codex, Ollama, etc.) to...

claude-red is a curated library of 58 offensive security skills packaged as SKILL.md files that enhance Claude AI with red team methodology across 13...

This repository is a curated collection of 150+ red teaming tools and techniques designed for penetration testers and security professionals...

Yakit is an interactive cybersecurity testing platform that serves as a unified frontend to Yaklang, a custom domain-specific language for security...

GoSearch is a Go-based OSINT tool that searches for usernames across 305+ websites and integrates with breach databases (HudsonRock, ProxyNova,...

AboutSecurity is a structured penetration testing knowledge base organized into 200+ skill methodologies, attack payloads, vulnerability data, and...

Maigret is a Python CLI tool for username-based reconnaissance that checks 3000+ websites for accounts and aggregates publicly available information...

Nidhogg is a Windows kernel rootkit for x64 systems that demonstrates 25+ rootkit techniques including process hiding, privilege escalation, memory...

Ligolo-ng is a tunneling and pivoting tool for penetration testers that establishes network tunnels via TUN interfaces instead of traditional SOCKS...

theHarvester is a Python-based OSINT reconnaissance tool designed for red team assessments and penetration testing. It gathers emails, subdomains, IP...

Sherlock is a CLI tool for OSINT (open-source intelligence) that searches 400+ social networks to find accounts registered under a given username. It...

A curated collection of search engines and tools for security professionals conducting penetration testing, vulnerability assessments, and threat...

PayloadsAllTheThings is a comprehensive, community-maintained reference collection of payloads, bypasses, and exploitation techniques for web...

ezXSS is a specialized penetration testing tool designed to detect and exploit blind Cross-Site Scripting (XSS) vulnerabilities. It provides security...

Gogo is a high-performance automated reconnaissance and vulnerability scanning engine purpose-built for red team operations, supporting...

dirsearch is a web path brute-forcer tool for discovering hidden directories and files on web servers during penetration testing and bug bounty work....

bettercap is a comprehensive security framework written in Go that provides reconnaissance and MITM attack capabilities for WiFi, Bluetooth Low...

WiFi Pineapple Cloner ports the WiFi Pineapple NANO/TETRA platform to generic OpenWrt-compatible hardware, enabling security researchers and red...

Cariddi is a Go-based web crawler and security scanner designed for reconnaissance during bug bounty hunts and penetration testing. It crawls URLs...

LOLBAS is a curated database documenting Microsoft-signed binaries, scripts, and libraries that can be exploited for living-off-the-land attack...

Snoop is a specialized OSINT (Open Source Intelligence) tool for username reconnaissance across ~5,400 websites, designed to help security...

emp3r0r is a Linux-focused C2 framework for red team and penetration testing operations, built around a self-healing gossip mesh architecture with...

Spray is a high-performance HTTP directory fuzzer written in Go, designed for red team security assessments and web reconnaissance. It specializes in...

A comprehensive curated collection of security lists and resources for SOC, DFIR, and threat intelligence teams. Provides threat hunting keywords,...

VIPER is a red team and adversary simulation platform designed for security professionals conducting authorized penetration testing and cybersecurity...

Kubernetes Goat is a deliberately vulnerable Kubernetes cluster environment designed for hands-on security training and penetration testing practice....

ChatLog was a specialized tool for analyzing and extracting chat data from messaging platforms (primarily WeChat). The project was designed for...

LitterBox is a self-hosted sandbox designed for red teams to test malware payloads against modern detection systems (EDR, YARA, static analyzers)...