Pentest Tools

CEHv10StudyGuide

Study Guide for the CEH v10

pentest-book

shad0w

A post exploitation framework designed to operate covertly on heavily monitored enviroments

sifter

Sifter is a recon tool, originally designed to check the status. Further recon can then be done on your target using various powerfull osint and recon tools, such as blackwidow Yuki-Chan WPScan and many more.

awesome-go

A curated list of awesome Go frameworks, libraries and software

Awesome-WAF

🔥 Everything awesome about web-application firewalls (WAF).

bing-ip2hosts

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

Bug-Bounty-Scripts

The scripts I write to help me on my bug bounty hunting

CORS-Scanner

evilpdf

Embedding executable files in PDF Documents

filebuster

An extremely fast and flexible web fuzzer

fuzzmost

all manner of wordlists

Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

git-secrets

Prevents you from committing secrets and credentials into git repositories

httpie

As easy as HTTPie /aitch-tee-tee-pie/ 🥧 Modern command-line HTTP client – user-friendly curl alternative with intuitive UI, JSON support, syntax highlighting, wget-like downloads, extensions, etc. https://twitter.com/clihttp

Impost3r

👻Impost3r -- A linux password thief

JSScanner

You can read the writeup on this script here

LinkFinder

A python script that finds endpoints in JavaScript files

nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

patch-checker

Web-based check for Windows privesc vulnerabilities

Reconcobra

Ultimate Recon Software for Information Gathering

reconness

ReconNess Web App Tool

ReconPi

ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.

recox

Master script for web reconnaissance

shellspec

BDD unit testing framework for bash, zsh, dash and all POSIX shell scripts with coverage reporting

Shodanfy.py

Get ports,vulnerabilities,informations,banners,..etc for any IP with Shodan (no apikey! no rate-limit!)

subscraper

Subdomain enumeration through various techniques

tensorflow

An Open Source Machine Learning Framework for Everyone

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

XRCross

XRCross a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test XSS / SSRF vulnerabilities