0x90n

Th3inspector

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

GWT-Penetration-Testing-Toolset

A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt

SSAS-Vulnerable-Image-Upload

The repository for an image upload web service that's supposed to have a few vulnerabilities.

icebreaker

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

Phant0m

Windows Event Log Killer

offsec_pdfs

:heavy_check_mark: your offsec knowledge

Cheatsheets

Penetration Testing/Security Cheatsheets

pentest

:no_entry: offsec batteries included

AutoSploit

Automated Mass Exploiter

Minesweeper

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

HTTPoxyScan

HTTPoxy Exploit Scanner by 1N3 @CrowdShield

attacking-drupal

:fire: Scripts used to augment the penetration testing process of Drupal web applications.

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

wifi-cracking

Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

CTFToolDirectory

List of helpful tools for every CTF Category

win_enum_local

Local Windows Enumeration for Privilege Escalation

nzyme

Network Defense System.

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

challenges

Hacking challenges

SniffAir

A framework for wireless pentesting.

OSCP-Prep

OSCP

snax

Snax is an on-the-fly URL encoder for creating XSS payloads. Result of inadequate B.Suite encoder

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

IIS-ShortName-Scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

Nmap-Scans

flawed_fortress-secgen_ctf_frontend

CTF website frontend for SecGen

SecGen

Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)

pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

SecGen

Create randomly insecure VMs