Measured catalogue entries in Cybersecurity.
A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.
Stars2,106Measured · Oct 16, 2026
Momentum217 days · Measured · +0.29% relative change
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
Stars2,548Measured · Oct 20, 2026
Momentum20.67 days · Measured · +0.24% relative change
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
Stars3,944Measured · Oct 20, 2026
Momentum207 days · Measured · +0.15% relative change
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Stars12,290Measured · Oct 20, 2026
Momentum19.27 days · Measured · +0.05% relative change
AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SARIF output. FastAPI + React.
Stars343Measured · Oct 20, 2026
Momentum18.97 days · Measured · +0.88% relative change
AI-powered bug bounty hunting toolkit that works with or without subscription.
Stars5,346Measured · Oct 15, 2026
Momentum18.17 days · Measured · +0.09% relative change
The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.
Stars514Measured · Oct 20, 2026
Momentum17.47 days · Measured · +0.59% relative change
Awesome hacking is an awesome collection of hacking tools.
Stars4,031Measured · Oct 20, 2026
Momentum16.47 days · Measured · +0.1% relative change
💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
Stars4,488Measured · Oct 20, 2026
Momentum16.37 days · Measured · +0.09% relative change
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Stars5,618Measured · Oct 20, 2026
Momentum16.17 days · Measured · +0.07% relative change