ethical-hacking-tools 开源项目推荐（618 个）

kaifcodec /user-scanner

（二合一）电子邮件与用户名 OSINT 套件，原生支持 MCP，仅凭单个电子邮件/用户名即可深度提取数据。分析 2720+ 个持续维护的扫描向量（210+ 电子邮件 / 2510+ 用户名），用于安全研究、调查和数字足迹分析。

samugit83 /redamon

开源、自托管的 AI 渗透测试框架：将你的攻击面映射为图，在带有人工审批关卡的 Kali 沙箱中自主利用它，并提交修复所发现问题的 PR。双向 MCP：可将任意 MCP 服务器作为工具接入，或从 Claude Code 或你自己的代理驱动 RedAmon。

Gowtham-Darkseid /AutoPentestX

AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool

JoasASantos /NeuroSploit

NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.

hueristiq /xurlfind3r

A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

0n1cOn3 /FluxER

FluxER - The bash script which installs and runs the Fluxion tool inside Termux. The wireless security auditing tool used to perform WPA/WPA2 auditing and MITM auditing.

s-r-e-e-r-a-j /WebSift

WebSift is an OSINT ethical hacking tool designed to scrape and extract emails, phone numbers, and social media links or other URLs from websites. It is developed for Termux and Linux-based systems

0xrajneesh /Ethical-Hacking-Projects-for-beginners

Hands-on ethical hacking projects for beginners, covering network scanning, web app testing, password cracking, honeypots, Wi-Fi auditing, phishing, and SQL injection.

dkyazzentwatwa /project-starbeam

The Ultimate ESP32 Jammer w/ 5 Radios. #RIPflipper -- V2 OUT NOW

faiyazahmad07 /xss_vibes

A modern tool written in Python that automates your xss findings.

hackirby /skuld

Next-Gen Stealer written in Go. Stealing from Discord, Chromium-Based & Firefox-Based Browsers, Crypto Wallets and more, from every user on every disk. (PoC. For educational purposes only)

abdulkadir-gungor /JPGtoMalware

它将可执行文件或负载嵌入到jpg文件中。 这个程序用的方法并不完全是隐写术。因此，它不会对JPG文件造成任何失真。 JPG 文件大小和负载不必成比例。JPG 文件通常在任何查看应用或网页应用中显示。它可以绕过防火墙、杀毒等多种安全程序。如果对文件进行详细检查，比隐写术更容易发现。然而，由于JPG文件中的有效载荷是加密的，因此无法轻易解密。它还采用“垃圾代码插入/死码插入”方法，防止有效载荷在运行时被杀毒软件捕获。

Shad0w-ops /H.I.V.E

H.I.V.E is an automated OSINT (Open Source Intelligence) multi-tool that enables efficient data gathering from various sources through the utilization of a single, unified platform.

codesiddhant /Jasmin-Ransomware

Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to overcome the risk of external attacks.

cyberytti /ToolHunt

This is a local search engine to search for cybersecurity tools. It has 3000+ tools in it's database.

yogsec /One-Liner-OSINT

One Liner OSINT is a collection of powerful one-liner commands for Open-Source Intelligence (OSINT) gathering.

Warxim /petep

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

Kalyan-Deva /Hacking-Bug-Bounty-Books

Collection of Combination of 👨🏻‍💻Ethical Hacking, 🐧Linux, Cyber security, 💰Bug Bounty, Penetration testing, Networking and more IT Related Books that are Publicly Available.

Warxim /deluder

Deluder 是一种用于拦截代理应用程序不知情流量的工具。目前，Deluder 开箱即用支持 OpenSSL、GnuTLS、SChannel、WinSock 和 Linux 套接字。 ⚡

s-r-e-e-r-a-j /GhostRoute

GhostRoute is a powerful ethical hacking tool for anonymization, routing all your system network traffic through the Tor network, making it very hard to track your online activity, IP address, and location.