Best Pentesting & Ethical Hacking GitHub Repositories

Hunt down social media accounts by username across social networks

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Fast web fuzzer written in Go

Plugin for JADX to integrate MCP server

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

802.11 Attack Tool

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

:key: Hash type identifier (CLI & lib)

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

Dradis Framework: Collaboration and reporting for IT Security teams

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

Radio frequency scanner with recon and offensive capabilities

Open-source adversarial testing engine, SDK, and CLI for AI agents. Runs locally or against the Humanbound Platform.

A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI