Tools and Techniques for Red Team / Penetration Testing

🐢 Open-Source Evaluation & Testing library for LLM Agents

Adversary simulation and Red teaming platform with AI

The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.

A curated list of penetration testing and ethical hacking tools, organized by category. This compilation includes tools from Kali Linux and other notable sources.

Sandman is a NTP based backdoor for hardened networks.

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

Nimbo-C2 is yet another (simple and lightweight) C2 framework

Venom is a library that meant to perform evasive communication using stolen browser socket

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

Compiled tools for internal assessments

Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. Implemented in C#, C++, Crystal and Python

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

A comprehensive modern architecture model is proposed to integrate platform solutions and tooling to support a professional Red Team.

Generic PE loader for fast prototyping evasion techniques

Repo containing cracked red teaming tools.

Red Teaming python-framework for testing chatbots and GenAI systems.

smbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failover.