TartarusLabs

Quick script to scan through a PHP project and flag up functions that are of interest when looking for security vulnerabilities. Aids manual code review.

Language:PythonGPL-3.0300

ROADtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Language:PythonMIT173700

aws_pwn

A collection of AWS penetration testing junk

Language:Python112800

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Language:PythonApache-2.0988000

shodan-python

The official Python library for Shodan

Language:PythonNOASSERTION241800

zmap

ZMap is a fast single packet network scanner designed for Internet-wide network surveys.

Language:CApache-2.0532800

rdpscan

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

Language:C89400

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Language:CAGPL-3.02289700

BruteLoops

Protocol agnostic online password guessing API.

Language:PythonMIT8000

MSOLSpray

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

Language:PowerShellMIT85400

SessionGopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.

Language:PowerShell117800