Popular GitHub Repositories for Intranet Penetration

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

A GPT-empowered penetration testing tool

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

Helping Ethical Hackers use LLMs in 50 Lines of Code or less..

A script for credentials-based attack surface enumeration and general reconnaissance of massive networks

? Fully autonomous AI Agents system capable of performing complex penetration testing tasks

AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

CTF challenges designed and implemented in machine learning applications

本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。

LLM Agent and Evaluation Framework for Autonomous Penetration Testing

Penetration Testing AI Assistant based on open source LLMs.

LLM Testing Findings Templates

All-in-one offensive security toolbox with AI agent and MCP architecture. Integrates tools like Nmap, Metasploit, FFUF, SQLMap. Enables pentesting, bug bounty hunting, threat hunting, and reporting. RAG-based responses with local knowledge base support.

AI cybersecurity agent for automated penetration testing and vulnerability assessment

Professional Search Engine Hacking Syntax Tool - Supports Google, Baidu, and Bing search engines, and provides intelligent sidebar, URL extraction, custom syntax and other functions to help security research and penetration testing 专业的搜索引擎Hacking语法工具 - 支持Google、百度、Bing三大搜索引擎，提供智能侧边栏、URL提取、自定义语法等功能，助力安全研究和渗透测试

Gym-based environment for training offensive RL agents. Agents can generalize to unseen scenarios and simulation-trained agents can be deployed in the emulation.

This repo contains the codes of the penetration test benchmark for Generative Agents presented in the paper "AutoPenBench: Benchmarking Generative Agents for Penetration Testing". It contains also the instructions to install, develop and test new vulnerable containers to include in the benchmark.

NetHawk ?: An AI-powered tool for ethical hacking and network vulnerability assessment ??, simplifying deep scans and security audits for professionals ???.

WPAUDIT: Advanced WordPress security auditing suite & vulnerability scanner. Automates pentesting with Nmap, WPScan, Nuclei, SQLMap. Comprehensive reports. Ideal for ethical hackers & Kali Linux.