yaklang/yakit

An HTTP toolkit for security research.

The ZAP by Checkmarx Core project

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

The Browser Exploitation Framework Project

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

Automated Penetration Testing Agentic Framework Powered by Large Language Models

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

The all-in-one browser extension for offensive security professionals 🛠