L1NT

faraday

Open Source Vulnerability Management Platform

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Probable-Wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

npk

A mostly-serverless distributed hash cracking platform

npk

A mostly-serverless distributed hash cracking platform

spraywmi

SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

AFLplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

boofuzz

A fork and successor of the Sulley Fuzzing Framework

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

hass-aarlo

Asynchronous Arlo Component for Home Assistant

websocket-harness

Use normal web pentest tools to hack Websockets

STEWS

A Security Tool for Enumerating WebSockets

wsrepl

WebSocket REPL for pentesters

websocat

Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions

Websocket-King

WebSocket King Issue Tracker

python-arlo

Python Arlo is a library written in Python 2.7/3x that exposes the Netgear Arlo cameras as Python objects.

nuclei-ai-extension

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

arlo

Python module for interacting with Netgear's Arlo camera system.

busylight

Control USB connected presence lights from multiple vendors via the command-line or web API.

Arcadyan-5G-Web-Admin

Web App for T-Mobile Arcadyan KVD21 5G Gateway

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

rainyDayImageAPI

PentestHelpers

Simple scripts aiding penetration testing process

brevityrecon

Blacklist3r

project-blacklist3r

Asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

LiveTargetsFinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

drawio-threatmodeling

Draw.io libraries for threat modeling diagrams