pentesting-tool 开源项目推荐（169 个）

epi052 /feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

pwndoc /pwndoc

Pentest Report Generator

Syslifters /sysreptor

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

cytopia /pwncat

pwncat——强化版 netcat，具备防火墙、IDS/IPS 规避、绑定与反向 shell、自注入 shell 和端口转发等强大功能，并可通过 Python (PSE) 完全脚本化

itsreyi /BlockSuite

Minecraft server security assessment toolkit. Intercept, analyze, and test from a single desktop app.

SECFORCE /Tunna

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.

SaadAhla /FilelessPELoader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

dub-flow /sessionprobe

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

pwndoc-ng /pwndoc-ng

Pentest Report Generator

SECFORCE /SNMP-Brute

快速SNMP暴力破解、枚举、CISCO配置下载器和密码破解脚本。

iss4cf0ng /Alien

Alien is a modular webshell client developed for cybersecurity research and education. It provides a unified post-exploitation framework for managing different web technologies through reusable modules.

rootcathacking /catspin

Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.

k8scout /k8scout

Drop a single binary into a compromised Kubernetes pod and instantly map every realistic attack path to cluster-admin, node escape, secret theft, and cloud IAM takeover.

brows3r /iPwn

A Framework meant for the exploitation of iOS devices.

jonaslejon /ad-autopwn

AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD/Ghost-SPN/TGS-rewrite/Dollar-Ticket/WPAD/WSUS/PXE/SCCM/BloodHound auto-action/Loot/DCSync/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726/2026-24294/2026-26128). Authorized pentesting only.

0v3rride /Enum4LinuxPy

Everyone's favorite SMB/SAMBA/CIFS enumeration tool ported over to Python.

pentagridsec /PentagridScanController

Improve automated and semi-automated active scanning in Burp Pro

cyberaz0r /badmoodle

Moodle community-based vulnerability scanner

eredotpkfr /subscan

⚡ A subdomain enumeration tool leveraging diverse techniques, designed for advanced pentesting operations

nickvourd /Responder-Parser

Most Responder's configuration power in your hand.