0x90n

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

DVNA

Damn Vulnerable Node Application

Shells

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

AWS-Server-SeConfig

bugbountydash

Terminal dashboard for bug bounty hunters that use HackerOne and Bugcrowd

clusterd

application server attack toolkit

docs

Tips, Tricks, and Suggestions for Running a CTF

DSFS

Damn Small FI Scanner

DSSS

Damn Small SQLi Scanner

DSVW

Damn Small Vulnerable Web

DSXS

Damn Small XSS Scanner

evil-repo

"><script>prompt(1)</script>''"><!--<svg>

fuzzdb

Official FuzzDB project repository

gophish

Open-Source Phishing Toolkit

grapefruit

graudit

Grep rough audit - source code auditing tool

maltrail

Malicious traffic detection system

mellivora

Mellivora is a CTF engine written in PHP

pentest-env

Pentest environment (kali linux) deployer using vagrant and chef.

Pentester_Cheat_Sheet

Notes for all my Pentesting to help my bad memory :p

pentestly

Python and Powershell internal penetration testing framework

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

scantastic-tool

It's bloody scantastic

sonar

Self contained cross platform DNS recon tool

subHijack

Hijacking forgotten & misconfigured subdomains

subsearch

A subdomain brute force tool.

Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

write-ups-2015

Wiki-like CTF write-ups repository, maintained by the community. 2015

XSS