00derp

AS3WebSocket

ActionScript 3 WebSocket client implementation for the final WebSocket Draft RFC6455

ASH-Keylogger

A simple keylogger application for XSS attack.

atom-bombing

Brand New Code Injection for Windows

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

bashMailbombs

postfix infininate loop w/ bash using /dev/tcp

bashNetOffSec

blazer

Burp Suite AMF Extension

BreakingBricks

Some tools used in the Ruxcon / Kiwicon /SECT-T presentation "Breaking Bricks and Plumbing Pipes: Cisco ASA a Super Mario Adventure."

certbot

Certbot, previously the Let's Encrypt Client, is EFF's tool to obtain certs from Let's Encrypt, and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

chuckle

An automated SMB relay exploitation script.

cintruder

Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.

django-revproxy

Reverse Proxy view that supports all HTTP methods, Diazo transformations and Single Sign-On.

exabgp

The BGP swiss army knife of networking

fetch-some-proxies

Simple Python script for fetching "some" (usable) proxies

Fireaway

Next Generation Firewall Audit and Bypass Tool

fuzzer

A Python interface to AFL, allowing for easy injection of testcases and other functionality.

go-epson

impacket

Impacket is a collection of Python classes for working with network protocols.

MSBuildShell

MSBuildShell, a Powershell Host running within MSBuild.exe

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.

payloads

Git All the Payloads! A collection of web attack payloads.

peda

PEDA - Python Exploit Development Assistance for GDB

Pentest-Tools

Penetration Testing Tools Developed by AppSec Consulting.

Pocsuite

Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

ps-inject

inject shellcode on linux pid

scripts-1

shens

snarf

Snarf man-in-the-middle / relay suite

tomcatWarDeployer

Apache Tomcat auto WAR deployment & pwning penetration testing tool.

zeropress

A dumb script for finding dumb coding errors in WordPress plugins