Beast code in Giters

H04n9_4nh's starred repositories

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

454900

jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

Language:PythonMIT21900

email2phonenumber

A OSINT tool to obtain a target's phone number just by having his email address

Language:PythonMIT213400

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Language:GoMIT136600

Hacking-Rust

A FREE comprehensive online Rust hacking tutorial utilizing the x64, ARM64 and ARM32 architectures going step-by-step into the world of reverse engineering Rust from scratch.

Language:RustApache-2.016600

subfuz

A subdomain fuzzing tool

Language:PythonNOASSERTION14600

kenzer

automated web assets enumeration & scanning [DEPRECATED]

Language:Python28500

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

Language:PowerShellMIT200600

codimd

CodiMD - Realtime collaborative markdown notes on all platforms.

Language:JavaScriptAGPL-3.0923800

IIS-ShortName-Scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

Language:Java141900

sessionprobe

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

Language:GoMIT44300

GodPotato

Language:C#Apache-2.0174900

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Language:C#NOASSERTION370200

evil-winrm

The ultimate WinRM shell for hacking/pentesting

Language:RubyLGPL-3.0441900

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Language:PythonBSD-3-Clause236000

nomore403

Tool to bypass 403/40X response codes.

Language:GoMIT109100

regexp-security-cheatsheet

Language:PHP70600

TInjA

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

Language:GoApache-2.029800

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Language:PythonGPL-3.0537400

mimikatz

A little tool to play with Windows security

Language:C1929200

PrivescCheck

Privilege Escalation Enumeration Script for Windows

Language:PowerShellBSD-3-Clause290600

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Language:ShellGPL-3.01308300