从 65,707 个高星开源项目里，
找到你要的下一个。

CyberStrikeAI 是用 Go 编写的安全工具，面向安全研究与防护。

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation i…

Nettacker 是用 Python 编写的测试工具，用于自动化测试与验证，主打开源免费。

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

malicious-pdf 是用 Python 编写的测试工具，用于自动化测试与验证。

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, conve…

Pentest-Windows 是一个安全工具，面向安全研究与防护。

⚔️Windows11 Penetration Suite Toolkit 🔰 The First Windows Penetration Testing Environment on Mac M Chips

hoaxshell 是用 Python 编写的测试工具，用于自动化测试与验证。

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

FinalRecon 是用 Python 编写的安全工具，面向安全研究与防护。

All In One Web Recon

Hacking-Tools 是一个测试工具，用于自动化测试与验证。

A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other no…

learn365 是一个安全工具，面向安全研究与防护。

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

SSTImap 是用 Python 编写的安全工具，面向安全研究与防护。

Automatic SSTI detection tool with interactive interface

toxssin 是用 Python 编写的测试工具，用于自动化测试与验证。

An XSS exploitation command-line interface and payload generator.

SocialPwned 是用 Python 编写的测试工具，用于自动化测试与验证。

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to f…

Offensive-OSINT-Tools 是一个安全工具，面向安全研究与防护。

OffSec OSINT Pentest/RedTeam Tools

eyeballer 是用 Python 编写的 AI 工具，用于人工智能方向的建模与推理。

Convolutional neural network for analyzing pentest screenshots

shortscan 是用 Go 编写的安全工具，面向安全研究与防护。

An IIS short filename enumeration tool

xalgorix 是用 Go 编写的安全工具，面向安全研究与防护，主打实时。

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

frida-ios-hook 是用 JavaScript 编写的安全工具，面向安全研究与防护，主打易用。

A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform

conti-pentester-guide-leak 是用 Batchfile 编写的安全工具，面向安全研究与防护。

Leaked pentesting manuals given to Conti ransomware crooks

lonkero 是用 Rust 编写的安全工具，面向安全研究与防护，主打速度快。

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

o365spray 是用 Python 编写的安全工具，面向安全研究与防护。

Username enumeration and password spraying tool aimed at Microsoft O365.

FilelessPELoader 是用 C++ 编写的安全工具，面向安全研究与防护。

Loading Remote AES Encrypted PE in memory , Decrypted it and run it